ui: fix crash due to out-of-bounds array access