[added to the 4.1 stable tree] af_key: fix buffer overread in parse_exthdrs()