security: smack: fix out-of-bounds access in smk_parse_smack()