rpcrt4: Don't use add on the sizes of array elements to an open-ended structure; use FIELD_OFFSET with the array index instead.

advapi32: Always set the requested fields of the security descriptor according to the info flags in GetNamedSecurityInfoW.

Also, set the control flags so that other security descriptor
functions can retrieve the info from it.

mshtml: Notify the Gecko stream listener that we stopped binding, if an error occurs in start_binding.

mshtml: The SRC value returned from HTMLElement_getAttribute should be an absolute, not relative URL.