eCryptfs: fix Tag 1 parsing code