CVE-2013-4408:s3:rpc_client: verify frag_len at least contains the header size