tp: validate tuple and field size's.

connector/c/include/tp.h

@@ -1065,6 +1065,8 @@ tp_next(struct tp *p) {
 	p->t = tp_tupleend(p) + 4;
 fetch:
 	p->tsz = *(uint32_t*)(p->t - 4);
+	if (tp_unlikely((p->t + p->tsz) > p->e))
+		return -1;
 	p->f = NULL;
 	return 1;
 }
@@ -1087,6 +1089,8 @@ fetch:;
 	register int rc = tp_leb128load(p, &p->fsz);
 	if (tp_unlikely(rc == -1))
 		return -1;
+	if (tp_unlikely((p->f + p->fsz) > p->e))
+		return -1;
 	return 1;
 }