Isn't calloc(3) the safer paradigm (protecting against integer overflows, in case n sizeof > SIZE_MAX) recommanded for this case ? (besides the memory zeroing).