[PATCH 1/3] helper functions to allocate and free audit_buffers