contrib/lar: check for buffer overflows in lar_find_archive() and lar_find_member()