Thanks for your insights, which prompted to actually jump into the malloc.c implementation.