Application hang via truncated buffer lengths

Denial of service in the Rust bzip2 crate before 0.4.4 allows attackers to hang applications by processing a crafted large file. The Compress and Decompress methods narrow slice lengths to 32-bit c_uint values, so a 4 GiB-aligned buffer length becomes zero and callers loop without progress. Reachability requires an application to process attacker-controlled data large enough to produce the overflowing buffer, and the reported consequence is a hang.