crypto/qat: fix out-of-bounds access