Fix a crash or unbounded allocation in RSA_padding_add_PKCS1_PSS_mgf1