use duplicating variant in relaxng to mitigate UAF
diff --git a/relaxng.c b/relaxng.c
index c0e94a3..d399c4e 100644
--- a/relaxng.c
+++ b/relaxng.c
@@ -8658,7 +8658,7 @@
 
                 if ((ret == 0) && (ctxt->state->value != NULL) &&
                     (ctxt->state->value != ctxt->state->endvalue)) {
-                    VALID_ERR2(XML_RELAXNG_ERR_LISTEXTRA,
+                    VALID_ERR2P(XML_RELAXNG_ERR_LISTEXTRA,
                                ctxt->state->value);
                     ret = -1;
                 }