[NETFILTER]: Fix possible overflow in netfilters do_replace()