You're right--if it can't find memory within the heap, it will invoke a call to brk and it will allocate it from the OS and thereby invoking a syscall. Apologies for my lumping of malloc as a syscall :)