Check the fragcounter in donwlink FragDecoderProcess

[ekleezg]

The fragCounter is data coming from the packet, but without validation, it can cause an out-of-bounds (OOB) issue in the following code in FragDecoderProcess.

FragDecoder.FragNbMissingIndex[fragCounter - 1] = 0;

The maximum number of fragments is defined as FRAG_MAX_NB which is 21.