sdhci: out of bounds read on sd->sd_status