vga: fix banked access bounds checking (CVE-2016-3710)