The AAC plugin sometimes does not check the length of available data
when checking for magic prefixes.  Add length checks.