CVE-2019-12222: affects libsdl-image, not libsdl

After investigating the issue, I found out that the vulnerability lies in
the sdl_image code base.

See patch proposal and report on upstream bug tracker:
https://bugzilla.libsdl.org/show_bug.cgi?id=4621#c1