Fix CVE-2014-3597 Possible segfault in DNS response overrun

Summary: Validate dlen at every turn. Leave no overrun unchecked.

Ref: https://bugs.php.net/bug.php?id=67717

Reviewed By: @ptarjan

Differential Revision: D1512572