Fix some CodeQL findings (#4044) #675

Job	Run time
Ubuntu Build release	16m 29s
Ubuntu Build debug	15m 2s
Ubuntu Build asan	50m 30s
Ubuntu Build msan	1h 16m 47s
Ubuntu Build tsan	1h 3m 25s
Ubuntu Build scalar	15m 47s
Ubuntu Build lowprecision	16m 45s
Ubuntu Build coverage	2h 40m 28s
Ubuntu Build release-nojpeg	14m 1s
Ubuntu Build release-lcms2	14m 20s
Ubuntu Build release-system-lcms2	14m 13s
Ubuntu Build release:minimal	14m 56s
Ubuntu Build release:gcc8	13m 24s
Ubuntu Build release:clang-7	14m 35s
MacOS Build release:osx	9m 10s
	8h 29m 52s

Provide feedback