
< 	runLength = (*pbOrderHdr) & g_MaskRegularRunLength;
---
> 	#define SAFE_ACCESS(ptr, end) ((ptr < end) ? *ptr : 0)
> 	runLength = SAFE_ACCESS(pbOrderHdr, pbEnd) & g_MaskRegularRunLength;
