Fix GHSA-r977-prxv-hc43

Move the bound check upwards. Since this doesn't generate output we can
check the bound first.