returns zero filled pages; remember to replace this function as well if you provide your own malloc implementation; ok djm@ deraadt@