api/http: Use srealloc return value (oops)