update: Don't cast returns from malloc()