smb: client: fix OOB in smb2_query_reparse_point()