avformat/mov: fix integer overflow in mov_read_udta_string()