h264dec: Prevent CABAC and CAVLC bitsteram overreading