spice: fix invalid memory access to vga.vram