unsigned long checked_add_size(unsigned long a, unsigned long b)
Same idea as checked_mul_size but for addition (e.g. summing several
fields' sizes into one combined allocation) -- abort instead of silently
wrapping if the sum overflows unsigned long.