Bluetooth: SDP: Fix possible out of bound memory access
Bluetooth: SDP: Fix possible out of bound memory access

buf->len should be validated before accessing it since remote can
send invalid frame_len which can result in out of bound memory
access.

This also fix the len check wrt cstate, since current check is
not considering the cstate length size and frame_len size.

Jira: ZEP-2110
Signed-off-by: Jaganath Kanakkassery <cdeedb43633a09d3dc68b67af94002f918d6c778@intel.com>

bigdinotech/zephyr,bigdinotech/zephyr,bigdinotech/zephyr,bigdinotech/zephyr,bigdinotech/zephyr