fix the out-of-bounds check to avoid UB

i think this is purely a pedantic change (our actual invocations of
copy_and_advance could never trigger UB), but might as well use the
UB-free code pattern.

src/main.c

@@ -95,7 +95,7 @@ txn_deny()
 static void
 copy_and_advance(void *dst, uint8_t **p, uint8_t *pend, size_t len)
 {
-  if (*p + len > pend) {
+  if (pend - *p < len) {
     THROW(0x6700);
   }