`calloc` is hard