`WS`: guard against integer overflow when parsing message lengths

Tried to not to change function signature by relying on saturating addition; could've implemented differently, though I'm not sure if returning an error here would make a huge difference.