validate-binary-search-tree, bottom up