Fail gracefully upon unexpectedly large input to p25519 reduction

Signed-off-by: Hanno Becker <hanno.becker@arm.com>
diff --git a/library/ecp_curves.c b/library/ecp_curves.c
index 571b0fe..5788b0d 100644
--- a/library/ecp_curves.c
+++ b/library/ecp_curves.c
@@ -5225,6 +5225,8 @@
     const size_t NT_n = N->n - P255_WIDTH;
     if( N->n <= P255_WIDTH )
         return( 0 );
+    if( NT_n > P255_WIDTH )
+        return( MBEDTLS_ERR_ECP_BAD_INPUT_DATA );
 
     /* Split N as N + 2^256 M */
     memset( Mp,   0,    sizeof( Mp ) );