Alex Henrie (@alexhenrie) commented about dlls/urlmon/sec_mgr.c:
if (used == allocated) { LPDWORD new_data;
new_data = realloc(data, allocated * sizeof(DWORD));
new_data = realloc(data, allocated * 2 * sizeof(DWORD));
Thank you for catching this (I'm surprised the tests didn't). The patch is correct, but please amend the commit message to say "urlmon" instead of "urlon".