lz4: add overrun checks to lz4_uncompress_unknownoutputsize()
lz4: ensure length does not wrap
lz4: fix another possible overrun