remote: use xstrdup() instead of strdup()