They’re referring to kalloc_type [0] [1].

[0]: https://security.apple.com/blog/towards-the-next-generation-...

[1]: https://security.apple.com/blog/what-if-we-had-sockpuppet-in...