openssl: Add heartbeat extension bounds check