avcodec/takdec: Fix integer overflow in decode_subframe()