make SDL_ConvertPixels() a little more secure (still not totally safe)