xpath BUGFIX wrong malloc size
diff --git a/src/xpath.c b/src/xpath.c
index f527f72..a096674 100644
--- a/src/xpath.c
+++ b/src/xpath.c
@@ -2934,7 +2934,7 @@
             /* the ending 0 as well */
             ++j;
 
-            dup->repeat[i] = malloc(j * sizeof *dup->repeat);
+            dup->repeat[i] = malloc(j * sizeof **dup->repeat);
             LY_CHECK_ERR_GOTO(!dup->repeat[i], LOGMEM(ctx), error);
             memcpy(dup->repeat[i], exp->repeat[i], j * sizeof **dup->repeat);
             dup->repeat[i][j - 1] = 0;