Image::getPixelAddress: prevent overflow for large images