Make sure that xmlParseQName returns NULL in error case
If there's an error growing the input buffer when recovering from invalid QNames, make sure to return NULL. Otherwise, callers could be confused. In xmlParseStartTag2, for example, `tlen` could become negative. Found by OSS-Fuzz.
Showing with 4 additions and 0 deletions