spu: avoid relying on signed overflow undefined behavior