tcp: properly validate acks between snd_nxt and una_max