possible invalid usage of realloc

Here:

https://github.com/couchbaselabs/fleece/blob/60bfb99bfed50329a2a8c3a3fb0cacea074ea799/Fleece/Tree/MutableNode.hh#L332

operator new/delete defined as:

 static void* operator new(size_t size, unsigned capacity) {
            return ::operator new(size + capacity*sizeof(NodeRef));
        }

but then

 MutableInterior* grow() {
            assert_precondition(capacity() < kMaxChildren);
            auto replacement = (MutableInterior*)realloc(this,

should be malloc/free used instead of ::operator new in the first place,
to make it possible to use realloc here?

Start at Fleece/Tree/MutableNode.hh around the linked operator new/delete definitions and MutableInterior::grow(). Check whether the allocation and deallocation methods are compatible with realloc, then verify the appropriate ownership behavior for growth. Done means resolving whether this usage is valid and making the allocation strategy consistent if it is not.