ReadShortRes() actually reads a wannabe unsigned here

Insert Hyperlink dialog crashed, for example.
Plus some more sanity checks to guard against negative listbox positions
passed.

Change-Id: I6458df6aab3abebfaf64d767013b57db76872eec