EXPAND_SPARE
if (n > INT_MAX - EXPAND_SPARE) {
if ((unsigned)(n + EXPAND_SPARE) > SIZE_MAX / sizeof(XML_Char)) {
uri = MALLOC(parser, (n + EXPAND_SPARE) * sizeof(XML_Char));
binding->uriAlloc = n + EXPAND_SPARE;
if (len > INT_MAX - EXPAND_SPARE) {
if ((unsigned)(len + EXPAND_SPARE) > SIZE_MAX / sizeof(XML_Char)) {
= REALLOC(parser, b->uri, sizeof(XML_Char) * (len + EXPAND_SPARE));
b->uriAlloc = len + EXPAND_SPARE;
if (len > INT_MAX - EXPAND_SPARE) {
if ((unsigned)(len + EXPAND_SPARE) > SIZE_MAX / sizeof(XML_Char)) {
b->uri = MALLOC(parser, sizeof(XML_Char) * (len + EXPAND_SPARE));
b->uriAlloc = len + EXPAND_SPARE;