Merge UBSan vla-bounds-not-positive fix from upstream am: ff1aa200b8 am: 41fcfd8bf0

Original change: https://android-review.googlesource.com/c/platform/external/libchrome-gestures/+/2871708

Change-Id: I9093d4ff132807b18d9e17b0366cc41ec5f03f10
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>