hevc: do not dereference pointer before NULL check in verify_md5()