Merge UBSan vla-bounds-not-positive fix from upstream am: ff1aa200b8 am: 41fcfd8bf0 am: 75305ca9be

Original change: https://android-review.googlesource.com/c/platform/external/libchrome-gestures/+/2871708

Change-Id: I17359821d4a1c76bcc5cbac580d8167ff39dd2b1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>