Sanity check field lengths and sums to avoid potential overflows and reject
excessively large X509_NAME structures.

Issue reported by Guido Vranken.
Reviewed-by: NMatt Caswell <matt@openssl.org>