An implementation of an error-correcting malloc