Bug in ber_realloc?

["Alex Zeltser" <alex_zeltser@securecomputing.com>]

I may have hit another potential bug here.  In ber_memrealloc I don't think
we take into consideration the size of our debug block header when calling
realloc.  We correctly get the 'real' pointer by subtracting sizeof (struct
mer_mem_hdr) from the passed pointer and pass that to realloc; however, we
don't adjust the size 's' that was passed in to include the header in the
newly allocated block.

Any thoughts on this?

Thanks,

Alex Zeltser