libplist allows attackers to cause a denial of service (large memory allocation and crash) via vectors involving an offset size of zero.