fix: possible integer overflow

[b4yuan]

If user input is large enough, the multiplication to calculate malloc() size could overflow.