malloc: use hidden visibility