diff --git a/src/b_asprintf.h b/src/b_asprintf.h
index 5b539f67..4ad3be0f 100644
--- a/src/b_asprintf.h
+++ b/src/b_asprintf.h
@@ -41,7 +41,7 @@ int vasprintf(char **strp, const char *format, va_list ap) {
   int len = vscprintf(format, ap);
   if (len == -1)
     return -1;
-  char *str = (char *)malloc((len + 1) * sizeof(char));
+  char *str = (char *)calloc(len + 1, sizeof(char));
   if (!str)
     return -1;
   int retval = vsnprintf(str, len + 1, format, ap);
diff --git a/src/b_string.c b/src/b_string.c
index a6855dbd..f60b0594 100644
--- a/src/b_string.c
+++ b/src/b_string.c
@@ -657,8 +657,12 @@ DECLARE_STRING_METHOD(match) {
     for (int i = 0; i < (int)name_count; i++) {
       int n = (tab_ptr[0] << 8) | tab_ptr[1];
 
-      char *_key = malloc(sizeof(char *));
-      char *_val = malloc(sizeof(char *));
+      char *_key = malloc(sizeof(char));
+      memset(_key, 0, sizeof(char));
+
+      char *_val = malloc(sizeof(char));
+      memset(_val, 0, sizeof(char));
+
       sprintf(_key, "%*s", name_entry_size - 3, tab_ptr + 2);
       sprintf(_val, "%*s", (int)(o_vector[2 * n + 1] - o_vector[2 * n]),
               subject + o_vector[2 * n]);
@@ -779,8 +783,12 @@ DECLARE_STRING_METHOD(matches) {
     for (i = 0; i < (int)name_count; i++) {
       int n = (tab_ptr[0] << 8) | tab_ptr[1];
 
-      char *_key = malloc(sizeof(char *));
-      char *_val = malloc(sizeof(char *));
+      char *_key = malloc(sizeof(char));
+      memset(_key, 0, sizeof(char));
+
+      char *_val = malloc(sizeof(char));
+      memset(_val, 0, sizeof(char));
+
       sprintf(_key, "%*s", name_entry_size - 3, tab_ptr + 2);
       sprintf(_val, "%*s", (int)(o_vector[2 * n + 1] - o_vector[2 * n]),
               subject + o_vector[2 * n]);
@@ -896,8 +904,12 @@ DECLARE_STRING_METHOD(matches) {
       for (i = 0; i < (int)name_count; i++) {
         int n = (tab_ptr[0] << 8) | tab_ptr[1];
 
-        char *_key = malloc(sizeof(char *));
-        char *_val = malloc(sizeof(char *));
+        char *_key = malloc(sizeof(char));
+        memset(_key, 0, sizeof(char));
+
+        char *_val = malloc(sizeof(char));
+        memset(_val, 0, sizeof(char));
+
         sprintf(_key, "%*s", name_entry_size - 3, tab_ptr + 2);
         sprintf(_val, "%*s", (int)(o_vector[2 * n + 1] - o_vector[2 * n]),
                 subject + o_vector[2 * n]);
diff --git a/src/compiler.c b/src/compiler.c
index 3015fbd7..09483048 100644
--- a/src/compiler.c
+++ b/src/compiler.c
@@ -1038,7 +1038,7 @@ static int read_unicode_escape(b_parser *p, char *string, char *real_string,
 }
 
 static char *compile_string(b_parser *p) {
-  char *str = (char *)malloc(sizeof(char) * ((p->previous.length - (p->had_error ? 1 : 2)) + 1));
+  char *str = (char *)calloc((p->previous.length - (p->had_error ? 1 : 2)) + 1, sizeof(char));
   char *real = (char *)(p->previous.start + (p->had_error ? 0 : 1));
 
   int real_length = p->previous.length - (p->had_error ? 1 : 2);
diff --git a/src/memory.c b/src/memory.c
index 419cf197..7561d9da 100644
--- a/src/memory.c
+++ b/src/memory.c
@@ -229,7 +229,7 @@ static void free_object(b_vm *vm, b_obj *object) {
     case OBJ_FUNCTION: {
       b_obj_func *function = (b_obj_func *)object;
       free_blob(vm, &function->blob);
-      // free((void *)function->file);
+      function->file = NULL;
       FREE(b_obj_func, object);
       break;
     }
@@ -320,6 +320,7 @@ void free_objects(b_vm *vm) {
   }
 
   free(vm->gray_stack);
+  vm->gray_stack = NULL;
 }
 
 void collect_garbage(b_vm *vm) {
diff --git a/src/module.c b/src/module.c
index 07d96a60..b886de5f 100644
--- a/src/module.c
+++ b/src/module.c
@@ -27,7 +27,9 @@ void bind_native_modules(b_vm *vm, b_obj_string *module_name,
 
   if (is_core_library_file((char *) module_path, module_name->chars)) {
     for (int i = 0; modules[i].name != NULL; i++) {
-      if (memcmp(modules[i].name, module_name->chars, module_name->length) ==
+      int _module_name_length = (int)strlen(modules[i].name);
+      if (_module_name_length == module_name->length &&
+        memcmp(modules[i].name, module_name->chars, _module_name_length) ==
           0) {
         b_module_reg module = modules[i].module_func(vm);
 
diff --git a/src/object.c b/src/object.c
index f2730556..4f9faa25 100644
--- a/src/object.c
+++ b/src/object.c
@@ -326,7 +326,7 @@ static inline char *function_to_string(b_obj_func *func) {
   if (func->name == NULL) {
     return "<script 0x00>";
   }
-  char *str = (char *)malloc(sizeof(char *));
+  char *str = (char *)malloc(sizeof(char) * (snprintf(NULL, 0, "<function %s>", func->name->chars)));
   sprintf(str, "<function %s>", func->name->chars);
   return str;
 }
@@ -346,7 +346,7 @@ static inline char *list_to_string(b_vm *vm, b_value_arr *array) {
 static inline char *bytes_to_string(b_vm *vm, b_byte_arr *array) {
   char *str = "(";
   for (int i = 0; i < array->count; i++) {
-    char *chars = (char *)malloc(sizeof(char *));
+    char *chars = (char *)malloc(sizeof(char) * (snprintf(NULL, 0, "0x%x", array->bytes[i])));
     sprintf(chars, "0x%x", array->bytes[i]);
 
     if (i != array->count - 1) {
@@ -378,7 +378,8 @@ static char *dict_to_string(b_vm *vm, b_obj_dict *dict) {
 }
 
 char *object_to_string(b_vm *vm, b_value value) {
-  char *str = (char *)malloc(sizeof(char *));
+  char *str = (char *)malloc(sizeof(char));
+  memset(str, 0, sizeof(char));
 
   switch (OBJ_TYPE(value)) {
   case OBJ_SWITCH: {
diff --git a/src/pathinfo.c b/src/pathinfo.c
index 48448461..54d5fd93 100644
--- a/src/pathinfo.c
+++ b/src/pathinfo.c
@@ -73,7 +73,7 @@ char *get_exe_path() {
 
 char *get_exe_path() {
   char raw_path[PATH_MAX];
-  char *real_path = malloc(PATH_MAX * sizeof(char));
+  char *real_path = (char *)malloc(PATH_MAX * sizeof(char));
   uint32_t raw_size = (uint32_t) sizeof(raw_path);
 
   if (!_NSGetExecutablePath(raw_path, &raw_size)) {
@@ -126,6 +126,8 @@ char *get_filename(char *filepath) {
   }
   length = length - start;
   char *string = malloc(sizeof(char));
+  memset(string, 0, sizeof(char));
+
   strncat(string, filepath + start, length);
   return string;
 }
diff --git a/src/scanner.c b/src/scanner.c
index 64938a7b..771c7197 100644
--- a/src/scanner.c
+++ b/src/scanner.c
@@ -30,7 +30,7 @@ static b_token error_token(b_scanner *s, const char *message, ...) {
   va_list args;
   va_start(args, message);
   int length = vsnprintf(NULL, 0, message, args);
-  char *err = (char*) malloc(sizeof(char) * (length + 1));
+  char *err = (char*) calloc(length + 1, sizeof(char));
   vsprintf(err, message, args);
   va_end(args);
 
diff --git a/src/util.c b/src/util.c
index 87fe06de..dd931ca5 100644
--- a/src/util.c
+++ b/src/util.c
@@ -24,7 +24,7 @@ int utf8_number_bytes(int value) {
 char *utf8_encode(unsigned int code) {
   int count = utf8_number_bytes((int)code);
   if (count > 0) {
-    char *chars = (char *) malloc((count + 1) * sizeof(char));
+    char *chars = (char *) calloc(count + 1, sizeof(char));
     if (code <= 0x7F) {
       chars[0] = (char)(code & 0x7F);
       chars[1] = '\0';
@@ -126,7 +126,7 @@ char *append_strings(const char *old, const char *new_str) {
   const size_t out_len = old_len + new_len;
 
   // allocate a pointer to the new string
-  char *out = malloc(out_len + sizeof(char));
+  char *out = calloc(out_len + 1, sizeof(char));
 
   // concat both strings and return
   if (out != NULL) {
@@ -206,6 +206,7 @@ char *read_file(const char *path) {
 
   // the system might not have enough memory to read the file.
   if (buffer == NULL) {
+    fclose(fp);
     return NULL;
   }
 
@@ -213,6 +214,8 @@ char *read_file(const char *path) {
 
   // if we couldn't read the entire file
   if (bytes_read < file_size) {
+    fclose(fp);
+    free(buffer);
     return NULL;
   }
 
diff --git a/src/value.c b/src/value.c
index fb33ebd8..1c3ea5d7 100644
--- a/src/value.c
+++ b/src/value.c
@@ -16,7 +16,7 @@ void init_value_arr(b_value_arr *array) {
 
 void init_byte_arr(b_byte_arr *array, int length) {
   array->count = length;
-  array->bytes = (unsigned char *) calloc(length, sizeof(unsigned char *));
+  array->bytes = (unsigned char *) calloc(length, sizeof(unsigned char));
 }
 
 void write_value_arr(b_vm *vm, b_value_arr *array, b_value value) {
diff --git a/src/vm.c b/src/vm.c
index eb0cf0e1..97482523 100644
--- a/src/vm.c
+++ b/src/vm.c
@@ -53,7 +53,7 @@ static b_value get_stack_trace(b_vm *vm){
     const char* trace_start = "    File: %s, Line: %d, In: ";
     size_t trace_start_length = snprintf(NULL, 0, trace_start, function->file, line);
 
-    char *trace_part = (char*)malloc(trace_start_length + sizeof(char));
+    char *trace_part = (char*)calloc(trace_start_length + 1, sizeof(char));
     sprintf(trace_part, trace_start, function->file, line);
     trace_part[(int)trace_start_length] = '\0';