use safe_malloc and safe_calloc in generated code