Clamp the return value of CRYPTO_num_locks

This avoids an implicit conversion to size_t from an int and does
the multiplication in the size_t type.