avcodec/htmlsubtitles: Fixes denial of service due to use of sscanf in inner loop for tag scaning

      Fixes: [Semmle Security Reports #19438]
Fixes: dos_sscanf1.mkv

Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>