switch malloc+memset(0) to calloc()