Simulating malloc failures

Is there something like valgrind that can make certain calls to malloc (also system calls could be interesting) fail?  My poor error paths never get tested.

There's a reason people tell you to use /dev/urandom instead.
To be slower and less portable?