qed: potential overflow in qed_cxt_src_t2_alloc()