AVDTP: Fix a potential overflow about the media payload offset

This variable is uint16, and is possible to overflow when the length of
header extension is larger. Here we compare with the data length to
prevent any exceptions.

Change-Id: I3e963ebe681fae9d1f4f6407a80da4b77d1bc843
CRs-Fixed: 3237187