Protect against theoretical integer overflow in TLV parser.

* src/parsetlv.c (parse_tlv): Detect integer overflow

Although there is no case where callers use the (nhdr + length), it is
better to protect against such a use case already here.