`xmalloc` instead of `malloc`