Fix ubsan in AggregateFunctionMinMaxAny::read with high sizes

src/AggregateFunctions/AggregateFunctionMinMaxAny.h

@@ -29,6 +29,7 @@ namespace ErrorCodes
 {
     extern const int ILLEGAL_TYPE_OF_ARGUMENT;
     extern const int NOT_IMPLEMENTED;
+    extern const int TOO_LARGE_STRING_SIZE;
 }
 
 /** Aggregate functions that store one of passed values.
@@ -521,7 +522,11 @@ struct SingleValueDataString //-V730
             {
                 if (capacity < rhs_size)
                 {
-                    capacity = static_cast<UInt32>(roundUpToPowerOfTwoOrZero(rhs_size));
+                    capacity = static_cast<Int32>(roundUpToPowerOfTwoOrZero(rhs_size));
+                    /// It might happen if the size was too big and the rounded value does not fit a size_t
+                    if (unlikely(capacity <= rhs_size))
+                        throw Exception(ErrorCodes::TOO_LARGE_STRING_SIZE, "String size is too big ({})", rhs_size);
+
                     /// Don't free large_data here.
                     large_data = arena->alloc(capacity);
                 }

src/Common/Arena.h

@@ -141,7 +141,7 @@ class Arena : private boost::noncopyable
     /// Get piece of memory, without alignment.
     char * alloc(size_t size)
     {
-        if (unlikely(head->pos + size > head->end))
+        if (unlikely(static_cast<std::ptrdiff_t>(size) > head->end - head->pos))
             addMemoryChunk(size);
 
         char * res = head->pos;

tests/queries/0_stateless/02481_i43247_ubsan_in_minmaxany.sql

@@ -0,0 +1,3 @@
+-- https://github.com/ClickHouse/ClickHouse/issues/43247
+SELECT finalizeAggregation(CAST('AggregateFunction(categoricalInformationValue, Nullable(UInt8), UInt8)AggregateFunction(categoricalInformationValue, Nullable(UInt8), UInt8)',
+                           'AggregateFunction(min, String)')); -- { serverError 131 }