saslserv/{dh-aes,dh-blowfish}: avoid possible buffer overflow with untrusted input size