Fix invalid memory access in CScript::operator+=