
< 	runLength = (*pbOrderHdr) & g_MaskRegularRunLength;
---
> 	runLength = (pbOrderHdr < pbEnd) ? (*pbOrderHdr & g_MaskRegularRunLength) : 0;
