CVE-2025-37860 sfc: fix NULL dereferences in ef100_process_design_param()