realloc doesn't guarantee zeroing...