ntdll: Fix out-of-bound read in RtlIpv6AddressToStringExA. Bound check was performed after the array access, resulting in out-of-bound read of IN6_ADDR.