libpool writes a magic byte at the end of the allocation.  if this is not 
present
when memory is free'd, libpool assumes you've corrupted memory and aborts.

- erik

On Fri Jan  5 09:52:13 EST 2007, [EMAIL PROTECTED] wrote:
> > you are forgetting +1 for the null.  you need strlen("Hello World")+1.
> 
> Heh! Yeah, true. But then the strcpy() would write into non-allocated area, 
> so why does the free()-call make it crash?

Reply via email to