Harden pix_fmt

Fixes #815 (closed).

I implemented a get_pix_fmt wrapper that calls and checks the return value of av_get_pix_fmt and raises an appropriate exception.