Add comment on length checks when parsing ECDSA sigs

[real-or-random]

I claim the check can be removed but I don't want to touch this stable and well-tested code.

On the way, we fix grammar in another comment.