diff --git a/src/lib/ares_event_kqueue.c b/src/lib/ares_event_kqueue.c
index 585033e0..aedd99ec 100644
--- a/src/lib/ares_event_kqueue.c
+++ b/src/lib/ares_event_kqueue.c
@@ -93,7 +93,7 @@ static ares_bool_t ares_evsys_kqueue_init(ares_event_thread_t *e)
 
   kq->nchanges_alloc = 8;
   kq->changelist =
-    ares_malloc_zero(sizeof(*kq->changelist) * kq->nchanges_alloc);
+    ares_malloc_zero(kq->nchanges_alloc * sizeof(*kq->changelist));
   if (kq->changelist == NULL) {
     ares_evsys_kqueue_destroy(e);
     return ARES_FALSE;
@@ -123,8 +123,11 @@ static void ares_evsys_kqueue_enqueue(ares_evsys_kqueue_t *kq, int fd,
 
   if (kq->nchanges > kq->nchanges_alloc) {
     kq->nchanges_alloc <<= 1;
-    kq->changelist = ares_realloc_zero(kq->changelist, kq->nchanges_alloc >> 1,
-                                       kq->nchanges_alloc);
+    kq->changelist = ares_realloc_zero(
+      kq->changelist,
+      (kq->nchanges_alloc >> 1) * sizeof(*kq->changelist),
+      kq->nchanges_alloc        * sizeof(*kq->changelist)
+    );
   }
 
   EV_SET(&kq->changelist[idx], fd, filter, flags, 0, 0, 0);