n = vasprintf(&p, format, ap);

p is leak in _printf in libcli.c.