[PATCH 5/7] sandbox: Avoid using malloc() for system state