Multiple allocation calls use arithmetic expressions like 'w * h' and 'cam_pixels * 3' without overflow checks