Caller has a duty to check for error on return anyway, so may as well use calloc() and fail gracefully.