radv/xfb: fix counter buffer bounds checks.