Fix out-of-bounds checks for token parsing and GLB headers
Fix out-of-bounds checks for token parsing and GLB headers

This fixes several issues found by llvm-fuzz.

jkuhlmann/cgltf,jkuhlmann/cgltf,jkuhlmann/cgltf