avi: Fix integer overflow

Which would in turn cause a size verification failure, leading to a
buffer overflow
Reported by: Zhen Zhou, NSFOCUS Security Team

(cherry picked from commit a4b1de18)
Signed-off-by: Hugo Beauzée-Luyssen <hugo@beauzee.fr>