Fixes #142 (closed) and a signed overflow in decode_coefs during dequantization with /clusterfuzz-testcase-minimized-dav1d_fuzzer-5691270664552448. Credits to oss-fuzz and Thierry.