c-integer-promotion-and-conversion

No evidence of malware or intentional obfuscation. `alloc_good` contains an integer-overflow flaw: its bound does not prevent overflow in `n * 4`, which can result in an undersized allocation. `strlen_sz` also relies on a valid null-terminated input string.

The code contains deliberate examples of integer conversion and allocation-size hazards. The allocation overflow could lead to an undersized buffer and memory corruption if callers rely on the intended size. No malicious behavior is evident in this fragment.