vorbiscomment: crash on ogg files with malformed comments
While investigating vorbis changeset https://trac.xiph.org/changeset/14502 , I noticed that vorbiscomment crashes (SEGVs on out-of-bounds read) on ogg files with crafted comments (if file claims to contain large number of comments or long individual comment).
Test cases attached.