Aside from the fact that overcommit usually doesn't apply to embedded systems, malloc() is fine; its free() that is the problem.