x86: handle 16bit segment bound for JMP. bug reported by Pancake & Anton Kochkov