CVE-2026-59088: prevent signed integer overflow of the width-by-height
product in the FLI plug-in by widening the multiplication to gsize/gint64
in the frame buffer allocations, memset and memcpy calls, and by switching
the allocations to g_try_malloc with a failure check