anv: fix robust buffer access