remove list_push from the whitelist, don't use module_malloc directly