On: Let the callers of your API control allocations

[kragen]

That's a good point. I hadn't thought of that --- if you want to test how your code handles allocation failures, allocating in more places means you have a lot more to test.