...
[Seacord 2005] Chapter 4, "Dynamic Memory Management"
[RUS-CERT] Advisory 2002-08:02, "Flaw in calloc and similar routines"
[Secunia] Advisory SA10635, "HP-UX calloc Buffer Size Miscalculation Vulnerability"
...
08. Memory Management (MEM) MEM08-C. Use realloc() only to resize dynamically allocated arrays