Add missing return and length check to decode_signature.