netlabel: fix out-of-bounds memory accesses