block/cloop: validate block_size header field (CVE-2014-0144)