Today in my Scudo adventures: trying to figure out why I can't read manpages. groff is a complete mess of C++. I'm surprised this thing even works. Anyway, in 10min I've found two places where it allocates with malloc() and then frees with delete[]...
https://archive.softwareheritage.org/browse/origin/http://git.savannah.gnu.org/git/groff.git/content/src/libs/libgroff/strsave.cpp/ … Because strdup is overrated. No portability excuse even applies, groff bundles gnulib which has a fallback strdup implementation.