FreeBSD sppp buffer overflow

Buffer overflow on synchronous PPP LCP option parsing...