hostapd: CVE-2014-3686 fixes