> You can't "un-memmove" because you already lost bytes between new_hi and hi.

Oh, that's why I prefered a review. You're right, bytes are lost.

Here is a different approach which updates the size to ensure that the object is consistent on memory allocation failure.