Fix up potential overflows in size calculations by replacing instances

Fix up potential overflows in size calculations by replacing instances
of xmalloc(x * sizeof *y) by xnmalloc(x, sizeof *y) everywhere I could
find them.  Similarly by xrealloc(), malloc().  (Order is important:
xnmalloc(sizeof *y, x) will divide by 0 if x is 0.)