AIKIDO-2026-355916

TL;DR

The gridDisk and gridDiskDistances functions in h3-js derive an output buffer size from the caller-supplied ringSize and pass it directly to the WebAssembly allocator via _calloc without validating the resulting byte length. When ringSize is large, the unchecked allocation corrupts the shared WebAssembly heap, so later valid calls into the module return wrong results or fail. The fix adds a callocArray helper that caps allocations at a maximum byte length and throws E_MEMORY_ALLOC before the unsafe allocation occurs. Regression tests confirm oversized requests no longer break subsequent calls.