Check packet length to do not make out of bounds access. Also save ah_nxt
value to use it later, since ah pointer can become invalid.

Reported by: Maxime Villard <max at m00nbsd dot net>
MFC after: 5 days