Merge DSA reallocation timing fix CVE-2018-0734.