madwifi: fix an array overrun in the rate control attach check