a4hist: clang-analyzer caught a possible crash when getting cutflow

Should fix #186
Would only occur if there are more than two doublets, which is usually already dealt with while merging cutflows, which is why we haven't seen this crash before.