Simulating malloc failures

Is there something like valgrind that can make certain calls to malloc (also system calls could be interesting) fail?  My poor error paths never get tested.

http://www.ibm.com/developerworks/linux/library/l-glibc.html

To call malloc from your wrapper you'll have to grab the original malloc function via dlopen/dlsym. Easy!