If you check the malloc source code, you'll see that it can be compiled with debugging checks turned on; the version in the C library has them disabled. I suggest keeping the debugging malloc.o around somewhere like /usr/lib so everyone can get it when needed.