Buffer overflow when using mouse in menu

[ceski-1]

Using latest master. I can't reproduce this consistently but it seems to happen occasionally when using debug builds. Here is one instance where I caught it: asan.txt