net/nfb: check array size before access