header max capacity calcuations overflow vulnerabilities

[cmazakas]

The code used to calculate theoretical allocated header maximums lacks guards for overflow.

For example, if offset_type is u32 then u32::max as max_offset is problematic when used to allocate the header.