avcodec/indeo3: use signed variables to avoid underflow