CVE-2026-50262: fix reversed request-length check in GLX
__glXDisp_ChangeDrawableAttributes (and swapped variant) by reverting the
mesa size-check workaround and restoring REQUEST_FIXED_SIZE /
REQUEST_SIZE_MATCH in the bundled xserver GLX handlers (out-of-bounds read)