PVS-Studio warning V567 for Miranda IM

short ezxml_internal_dtd(ezxml_root_t root, char *s,
  size_t len)
{
  ...
  while (*(n = ++s + strspn(s, EZXML_WS)) && *n != '>') {
  ...
}

It's not guaranteed that 's' will be incremented before calling the strspn function.

This suspicious code was found in Miranda IM project by PVS-Studio static code analyzer.
Warning message is:
V567 Undefined behavior. The 's' variable is modified while being used twice between sequence points. msn ezxml.c 371

PVS-Studio is a static analyzer for detecting bugs in the source code of applications written in C, C++, C++11, C++/CX. Site: http://www.viva64.com/en/pvs-studio/