[fix&improve] Safer walloc (avoid size*nelem overflow). Larger EST_String supported