bplist: Fix integer overflow resulting in OOB heap buffer read

Credit to OSS-Fuzz
1 file changed