Always check your arithmetic, always check your arithmetic, always check your arithmetic... No, let's just keep repeating old classic bugs. OpenBSD's realloca

Always check your arithmetic, always check your arithmetic, always check your arithmetic... No, let's just keep repeating old classic bugs. OpenBSD's reallocarray(3) is a step in the right direction, but I've always been concerned about the focus on multiplication; needing to allocate x*y+z bytes is a rather common pattern. I suspect there's still plenty of additive arithmetic that goes unchecked.