Stricter limit on POS in vcf_parse()

Limiting POS to 62 bits helps avoid the risk of signed overflow
when it's set to a very extreme value.  The maximum is still
much higher than the length of the longest currently known
reference.

vcf.c

@@ -3703,7 +3703,7 @@ int vcf_parse(kstring_t *s, const bcf_hdr_t *h, bcf1_t *v)
 
     overflow = 0;
     char *tmp = p;
-    v->pos = hts_str2uint(p, &p, 63, &overflow);
+    v->pos = hts_str2uint(p, &p, 62, &overflow);
     if (overflow) {
         hts_log_error("Position value '%s' is too large", tmp);
         goto err;