[CFF] fix oss-fuzz issue 11670: NULL dereference (#1450) * guard against no subr access * code tweak * add minimized testcase for oss-fuzz 11670 (Null deference)