IPReassembler bug fix

A painstaking bug hunt discovered this.  On x86 if we were unlucky enough, an instruction accessing the network_length get into an spurious page fault loop until the packet freed above was re-allocated by a driver.