Function image_extent 

pub fn image_extent(segments: &[DataSegment]) -> u64

Total extent of the runtime image: max(off + len) over the segments (u64, so a hostile off + len cannot wrap — callers bound-check against the linear-memory size before packing).