!bug: use #curl_free on non-curl object
!bug: #malloc size is smaller than needed