libvips: Integer overflow leading to heap buffer overflow leading to possible attacker-controlled mmap-resident write