demuxer: fixed buffer overflow in H264 parser