ilo: fix bound check for 3DSTATE_URB_VS