libubox: backport additional length-checking fixes