Maybe not, but in any case I don't think string.h should be bringing in stdlib.h.
Would it be acceptable to move malloc and free to corecrt_malloc.h and then include only that file in string.h? Those functions really ought to be moved anyway to avoid declaring them in both malloc.h and stdlib.h.