Prevent crash in envelopes with unspecified instrument

I received an Android crash report in envelope resets. This is probably
caused by an invalid instrument number (xc->ins is initialized with -1).
I don't have the test case but this should prevent the sig11.

Signed-off-by: Claudio Matsuoka <cmatsuoka@gmail.com>