pua: be more aggressive when checking for valid extra_headers
 - check both pointer and length