Merge UBSan vla-bounds-not-positive fix from upstream am: ff1aa200b8

Original change: https://android-review.googlesource.com/c/platform/external/libchrome-gestures/+/2871708

Change-Id: I0f5624e8e99b09ec62e463b47aa1a7ff7dce903a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>