Fix cpplint warning in util/safe_arith.cpp