double free is instant crash