...
If one or more of the operands to the multiplication operations used in many of these macro definitions can be influenced by untrusted data, these operands should be checked for overflow before invoking the macro (see INT32-C. Ensure that integer operations on signed integers do not result in an overflow).
The use of type-generic function-like macros is an allowed exception (PRE00-EX4) to PRE00-A. Prefer inline or static functions to function-like macros.
...