CVE-2017-14632: vorbis_analysis_header_out: Don't clear opb if not initialized