oss-security possibly leading to incorrect allocation sizes and out-of-bounds heap writes