[analyzer] Check for negative values used as the size of a C variable-length array.

Patch by Daniel Fahlgren!