suprise suprise it was a double free()