netfilter: x_tables: check for size overflow