Excessive memory allocation via unvalidated dataWindow size values.
The vulnerability is specific to 3.3.x+ code paths. In 3.1.13, the
equivalent code uses uiMult() which has built-in overflow checking,
and the chunkTableValid() API used in the fix does not exist.