MFV r336800: libarchive: Cherry-pick upstream 2c8c83b9

Relevant vendor changes:

Fix issue #948: out-of-bounds read in lha_read_data_none()

admbugs: 877
MFC after: 3 days
Security: CVE-2017-14503