tdf#91721: fix crash during listbox control editing in database form

(cherry-picked from d505f160)

Change-Id: I415ccb6132b802f62c93367a050242aee3c128b1
Reviewed-on: https://gerrit.libreoffice.org/16286Tested-by: Jenkins <ci@libreoffice.org>
Reviewed-by: Miklos Vajna <vmiklos@collabora.co.uk>

sfx2/source/control/bindings.cxx

@@ -1030,8 +1030,8 @@ void SfxBindings::Release( SfxControllerItem& rItem )
     // find the bound function
     sal_uInt16 nId = rItem.GetId();
     sal_uInt16 nPos = GetSlotPos(nId);
-    SfxStateCache* pCache = (*pImp->pCaches)[nPos];
-    if ( pCache->GetId() == nId )
+    SfxStateCache* pCache = (nPos < pImp->pCaches->size()) ? (*pImp->pCaches)[nPos] : 0;
+    if ( pCache && pCache->GetId() == nId )
     {
         if ( pCache->GetInternalController() == &rItem )
         {