openat, save-cwd: avoid xmalloc