gallium/hud: avoid buffer overrun