* buffer.c (record_overlay_string): Check for size-calculation overflow.