Function cbm_cypher_cross_join_alloc

src/cypher/cypher.c:4538–4550

Worst-case binding_t slot count for a node cross-join: one row per * (existing binding × extra node), plus — for an OPTIONAL join with no extra * nodes — one fallback row per existing binding, plus a trailing sentinel slot. * * The plain-int product bind_count * extra_count overflows to a negative/garbage * malloc size on large graphs (the failure mode fixed for cross_join_with_rels), * so t

 * *out_n on success, CBM_NOT_FOUND on overflow. Non-static so the arithmetic
 * boundary can be unit-tested directly. */
int cbm_cypher_cross_join_alloc(int bind_count, int extra_count, bool opt, size_t *out_n) {
    size_t per_binding = extra_count > 0 ? (size_t)extra_count : (opt ? (size_t)SKIP_ONE : 0U);
    size_t rows = (size_t)bind_count * per_binding;
    if (rows > (size_t)INT_MAX) {
        return CBM_NOT_FOUND; /* new_count would not fit the int binding counter */
    }
    size_t n = rows + SKIP_ONE;
    if (n > SIZE_MAX / sizeof(binding_t)) {
        return CBM_NOT_FOUND; /* alloc_n * sizeof(binding_t) would overflow size_t */
    }
    *out_n = n;
    return 0;
}

/* Cross-join node-only pattern into existing bindings. Returns 0 on success,
 * CBM_NOT_FOUND when the allocation is refused (overflow) or fails (OOM); the