References could leak, NULL could be dereferenced, and the Expat parser could
be double freed when some errors raised.
(cherry picked from commit 9f3ed3e2)
Co-authored-by: Zackery Spytz <zspytz@gmail.com>