Fix MSVC build.

The difference of two pointers is signed, even though it's always
non-negative here, so MSVC is complaining about signedness mismatch.

Change-Id: I5a042d06ed348540706b93310af3f60f3ab5f303
Reviewed-on: https://boringssl-review.googlesource.com/5766
Reviewed-by: Adam Langley <agl@google.com>
diff --git a/ssl/tls_record.c b/ssl/tls_record.c
index 5fd9792..36e31b4 100644
--- a/ssl/tls_record.c
+++ b/ssl/tls_record.c
@@ -314,8 +314,8 @@
     }
     /* Ensure |do_seal_record| does not write beyond |in[0]|. */
     size_t frag_max_out = max_out;
-    if (out <= in + 1 && (in + 1) - out < frag_max_out) {
-      frag_max_out = (in + 1) - out;
+    if (out <= in + 1 && in + 1 < out + frag_max_out) {
+      frag_max_out = (size_t)(in + 1 - out);
     }
     if (!do_seal_record(ssl, out, &frag_len, frag_max_out, type, in, 1)) {
       return 0;