[PATCH 4.4 179/193] vfs, fdtable: Prevent bounds-check bypass via speculative execution