glibc realloc() crash?