Fix incorrect range check in multi_tag_message()
Fix incorrect range check in multi_tag_message()

9656fda introduced a buggy range check when ensuring that the
value's end offset does not extend past the end of the payload.

int08h/roughenough