Unsafe use of load_bytes_be

[bmerry]

Some code that calls load_bytes_be doesn't check that the size is within the legal limit. This could cause an assertion failure (or crash in release) if using certain item IDs with a large non-immediate payload.