Popping a life monitor segfaults the game

a regression introduced by !1466 (merged): popping a life monitor triggers a segfault. so far, i've been able to track it down to a buffer overflow in P_GetSkinSprite2, line 54 in file r_skins.c, but i haven't gotten into what the cause is yet.