In this case xmlSize is uninitialized. It's UB and and is going to be reported by new MemorySanitizer.