This ticks off an XXX comment: We basically assert on malloc to succeed
everywhere, so we should stick with it here, too.