Use an "xmalloc" wrapper for GumboOptions::allocator