Fix return value of sanitize when subformat is not readable

This is a fix on top of the previous issue fixed in
c917965b9e6fe2b21ed6c51559673288fa3af4b7.

This was caught by "libFuzzer" testing.
4 files changed