[arrow-buffer] Integer overflow in repeat_slice_n_times leads to undefined behavior

[ksj1230]

Description

This issue was previously reported privately and is now being disclosed following coordination with maintainers.

repeat_slice_n_times() computes repeated byte length using unchecked arithmetic.
When the multiplication overflows, capacity checks may be bypassed, leading to insufficient allocation.

This can result in a potential out-of-bounds write via safe Rust APIs.

Fix

See PR #9819

Reported by Sungjin Kim (@ksj1230)

[alamb]

Thank you @ksj1230

This was fixed in

• Prevent repeat slice length overflow #9819

It was released in 58.2.0 (last week)

[alamb]

label_issue.py automatically added labels {'arrow'} from #9920