hud: don't overrun malloced arrays