Nikolay Sivov (@nsivov) commented about dlls/msxml3/saxreader.c:
if(locator->attr_count > locator->attr_alloc_count) { int new_size = locator->attr_count * 2;
attrs = heap_realloc_zero(locator->attributes, new_size * sizeof(struct _attributes));
attrs = realloc(locator->attributes, new_size * sizeof(struct _attributes));
Let's change this to sizeof(*locator->attributes) here and in other places where we have sizeof(struct ...) in this patch.