cron: Use reallocarray() to prevent integer overflow

Apply OpenBSD env.c,v 1.24 and 1.25, which replaces manual size
calculations with reallocarray() to prevent possible integer
overflow.

(cherry picked from commit 40d21618382108fefa84f8576b14302f65452718)