Fix some possible overrun issues revealed by Fortify build. Thanks to Steven Robbins for pointing out the issues. (fixes #2527)