This prevents in-memory corruption and possible panics if the on-disk
ACL is badly corrupted.
Signed-off-by: NChristoph Hellwig <hch@lst.de>
Signed-off-by: NBen Myers <bpm@sgi.com>