IPv6 frag: avoid overflow while parsing extension headers