Fix return value of sanitize when subformat is not readable This is a fix on top of the previous issue fixed in c917965b9e6fe2b21ed6c51559673288fa3af4b7. This was caught by "libFuzzer" testing.