diff --git a/dlls/gdi.exe16/gdi.c b/dlls/gdi.exe16/gdi.c
index ef460b37adb..2bd070ba40f 100644
--- a/dlls/gdi.exe16/gdi.c
+++ b/dlls/gdi.exe16/gdi.c
@@ -1982,7 +1982,7 @@ void WINAPI SetRectRgn16( HRGN16 hrgn, INT16 left, INT16 top, INT16 right, INT16
  */
 void WINAPI PlayMetaFileRecord16( HDC16 hdc, HANDLETABLE16 *ht, METARECORD *mr, UINT16 handles )
 {
-    HANDLETABLE *ht32 = HeapAlloc( GetProcessHeap(), 0, handles * sizeof(*ht32) );
+    HANDLETABLE *ht32 = HeapAlloc( GetProcessHeap(), 0, FIELD_OFFSET(HANDLETABLE, objectHandle[handles] ));
     unsigned int i;
 
     for (i = 0; i < handles; i++) ht32->objectHandle[i] = HGDIOBJ_32(ht->objectHandle[i]);
diff --git a/dlls/gdi.exe16/metafile.c b/dlls/gdi.exe16/metafile.c
index dfde8f75f60..2f0ccfebba9 100644
--- a/dlls/gdi.exe16/metafile.c
+++ b/dlls/gdi.exe16/metafile.c
@@ -213,7 +213,7 @@ BOOL16 WINAPI EnumMetaFile16( HDC16 hdc16, HMETAFILE16 hmf,
     /* create the handle table */
 
     hHT = GlobalAlloc16(GMEM_MOVEABLE | GMEM_ZEROINIT,
-		     sizeof(HANDLETABLE16) * mh->mtNoObjects);
+            FIELD_OFFSET(HANDLETABLE16, objectHandle[mh->mtNoObjects]));
     spht = WOWGlobalLock16(hHT);
 
     seg = hmf | 7;