Fix CVE-2022-3602 in punycode decoder.