wireguard: coverity fixes