### Elasticsearch Version

main

### Installed Plugins

_No response_

### Java Version

_bundled_

### OS Version

all

### Problem Description

Do this

### Steps to Reproduce

```
rm /tmp/evil
for a in {0..9}; do
   for b in {0..9}; do
      echo '{"index": {}}' >> /tmp/evil
      echo '{"a": '$a', "b": '$b'}' >> /tmp/evil
   done
done
echo >> /tmp/evil

curl -uelastic:password -XDELETE localhost:9200/test
curl -HContent-Type:application/json -uelastic:password -XPUT localhost:9200/test
curl -HContent-Type:application/json -uelastic:password -XPOST localhost:9200/test/_bulk --data-binary @/tmp/evil
curl -HContent-Type:application/json -uelastic:password -XPOST localhost:9200/test/_forcemerge?max_num_segments=1
curl -HContent-Type:application/json -uelastic:password -XPOST localhost:9200/test/_refresh

curl -HContent-Type:application/json -uelastic:password -XPOST localhost:9200/_esql?pretty -d'{
   "query": "FROM test | STATS MAX(a) BY a, b | KEEP a"
}'
```

### Logs (if relevant)

_No response_
x-pack/plugin/esql/compute/src/test/java/org/elasticsearch/compute/operator/ProjectOperatorTests.java
@Before
    @After
    public void assertBreakerIsZero() {
        assertThat(breaker.getUsed(), is(0L));
    }
    @Override
    protected DriverContext driverContext() {
        return new DriverContext(blockFactory.bigArrays(), blockFactory);
    }
    public void testProjectionOnEmptyPage() {
        var page = new Page(0);
        var projection = new ProjectOperator(randomMask(randomIntBetween(2, 10)));
        projection.addInput(page);
        assertEquals(page, projection.getOutput());
    }
    public void testProjection() {
        var size = randomIntBetween(2, 5);
        var blocks = new Block[size];
        for (int i = 0; i < blocks.length; i++) {
            blocks[i] = blockFactory.newConstantIntBlockWith(i, size);
        }
        var page = new Page(size, blocks);
        var mask = randomMask(size);
        var projection = new ProjectOperator(mask);
        projection.addInput(page);
        var out = projection.getOutput();
        assertEquals(mask.cardinality(), out.getBlockCount());
        int lastSetIndex = -1;
        for (int i = 0; i < out.getBlockCount(); i++) {
            var block = out.<IntBlock>getBlock(i);