[serialize] Catch signedness overflows in check_assign() Should address https://github.com/harfbuzz/harfbuzz/pull/2163#pullrequestreview-355137936