- void *mem = allocator(ref).malloc(size * count);
- memset(mem, 0, size * count);
+ size_t alloc_size = 0;
+ if (os_mul_overflow(count, size, &alloc_size)) {
+ return NULL;
+ }
+ void *mem = allocator(ref).malloc(alloc_size);
+ memset(mem, 0, alloc_size);