UPSTREAM: wifi: cfg80211: ensure length byte is present before access

When iterating the elements here, ensure the length byte is
present before checking it to see if the entire element will
fit into the buffer.

Longer term, we should rewrite this code using the type-safe
element iteration macros that check all of this.

Bug: 254441685
Fixes: 0b8fb8235be8 ("cfg80211: Parsing of Multiple BSSID information in scanning")
Reported-by: Soenke Huster <shuster@seemoo.tu-darmstadt.de>
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
(cherry picked from commit 567e14e39e8f8c6997a1378bc3be615afca86063)
Signed-off-by: Lee Jones <joneslee@google.com>
Change-Id: I77f36f91888b7841fe6f701cf4e84165b4d20517