dont trust received rxlen, use buffer max

Fixes #2351