Gratuitous xstrdup() is a leak.