fix(utils): use Go 1.20+ unsafe.String in UnsafeCastToString and add upfront overflow check in CalculateMaxSize

pkg/utils/bytes.go

@@ -15,5 +15,8 @@ func Uint64ToBytes(i uint64) []byte {
 // to byteSlice will also modify the contents of the string, so it is the caller's responsibility
 // to ensure that the byte slice will not modified after the string is created.
 func UnsafeCastToString(byteSlice []byte) string {
-	return *(*string)(unsafe.Pointer(&byteSlice)) // #nosec G103
+	if len(byteSlice) == 0 {
+		return ""
+	}
+	return unsafe.String(unsafe.SliceData(byteSlice), len(byteSlice))
 }

pkg/utils/calc.go

@@ -12,8 +12,12 @@ func CalculateMaxSize(src int64) (int, error) {
 	if src <= 0 {
 		return 0, fmt.Errorf("src must be positive: %d", src)
 	}
+	maxAllowed := int64(math.MaxInt)
+	if src > maxAllowed-maxAllowed/5 {
+		return 0, fmt.Errorf("src is too large, final value not fit: %d", src)
+	}
 	finalVal := src + int64(float64(src)*0.2)
-	if finalVal < 0 || finalVal > math.MaxInt {
+	if finalVal < 0 || finalVal > maxAllowed {
 		return 0, fmt.Errorf("src is too large, final value not fit: %d", src)
 	}
 	return int(finalVal), nil