fix(syscall): add addrlen bounds check in ff_hook_bind (#1068)

Reject bind() calls with addrlen larger than sizeof(struct sockaddr_storage)
to prevent out-of-bounds reads when copying the address into shared memory
via rte_memcpy.

Defensive hardening (low-risk; addrlen comes from the local process, not a
remote attacker). Cherry-picked from #1067; the accompanying test file in
that PR was intentionally omitted because it does not actually exercise
ff_hook_bind.

Author: jfb8856606

adapter/syscall/ff_hook_syscall.c

@@ -437,6 +437,11 @@ ff_hook_bind(int fd, const struct sockaddr *addr,
         return -1;
     }
 
+    if (addrlen > sizeof(struct sockaddr_storage)) {
+        errno = EINVAL;
+        return -1;
+    }
+
     CHECK_FD_OWNERSHIP(bind, (fd, addr, addrlen));
 
     DEFINE_REQ_ARGS(bind);