fix: combine alert fixes 3235–3249

[bniladridas]

Combines all 15 automated code scanning alert fixes for multiplication result converted to larger type. These changes span include/stb_image.h, include/stb_image_write.h, and src/preprocess.c with consistent application of size_t casts to prevent integer overflow before conversion to larger types. Overflow checks are added where allocation sizes are stored back into int variables such as out_size.

Note

Merging this pull request will automatically close #125, #126, #127, #128, #129, #130, #131, #132, #133, #134, #135, #136, #137, #138, #139

Close #125
Close #126
Close #127
Close #128
Close #129
Close #130
Close #131
Close #132
Close #133
Close #134
Close #135
Close #136
Close #137
Close #138
Close #139

Discussion

• Merge blocked by unresolved threads: fix: combine alert fixes 3235–3249 #140 (comment)

[changeset-bot]

⚠️ No Changeset found

Latest commit: 31566db

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[github-actions]

☑️ I checked the pre-commit hooks and there was nothing to fix at commit 31566db.

[bniladridas]

Added inline comments for overflow fix explanations

[bniladridas]

Review

[bniladridas]

Review notes:

• include/stb_image.h (line ~7733): out_size is stored as int, so the allocation size is bounded by INT_MAX.
• src/preprocess.c (line ~33): SIZE_MAX checks prevent integer overflow when calculating tile_w * tile_h * channels.
• include/stb_image_write.h (line ~891): size_t casts prevent multiplication overflow in STBIW_REALLOC_SIZED.

[bniladridas]

Merge was blocked because the inline review comments I added had unresolved threads. I resolved all three review threads in stb_image.h, stb_image_write.h and preprocess.c so the pull request is now ready to merge.

Note

All review threads must be resolved before a pull request can be merged on GitHub.