tdb: Make tdb_recovery_size overflow-safe