Mallocs in handlers must not call into handlers