...
Using realloc() to resize dynamic memory may allow heap inspection attacksinadvertently expose sensitive data. realloc() may allocate a new, larger block of memory, copy the contents, of buffer to this new block, free() the original block, and assign the newly allocated block to buffer. However, the contents of the original block may remain in heap memory after being marked for deallocation.
...