swscale: fix overflow in 16-bit vertical scaling.