Fix duplicate xmalloc in builtin-add