net/tap: add buffer overflow checks before checksum