Extra crash-safety in decoding a DSS signature blob