clang-format: Fix invalid write discovered by ASAN.

Introduced in r197900.