avformat/mov: Fix DoS in read_tfra()