asn1: Properly check length in asn1_unwrap()

Fixes CVE-2014-2891 in strongSwan releases 4.3.3-5.1.1.

Signed-off-by: Daniil Baturin <daniil@baturin.org>
4.5.2-1.1-bpo60+vyos1+helium2