netfilter: x_tables: check standard target size too