Use malloc() over variable-length array

Use malloc() over variable-length array #360