Yikes! sftp.c wasn't using the misc.h wrappered malloc functions,