avcodec/h264_slice: Fix overflow in recovery_frame computation