This patch adds an additional overflow check after computing new_size to ensure the multiplication by sizeof(uint32_t) will not overflow: if (new_size > 0 && (size_t)new_size > SIZE_MAX / sizeof(uint32_t)) This check is added in: - caca_resize() in caca/canvas.c - caca_create_frame() in caca/frame.c Fixes #86 Fixes #89 Fixes CVE-2026-42046pull/90/head