The existing code uses the input value count of the first channel for all of them. If the first channel is the largest, it leads to a crash-causing buffer overrun in memcpy below. Likely this was left since the time when only one channel was supported. As a crash fix, probably should go into 2.78