integer overflow in read_packet() [CVE-2013-2064]