UPSTREAM: binder: check for overflow when alloc for security context