scsi: fix buffer overflow in scsi_req_parse_cdb (CVE-2015-5158)