BUGFIX: alloc and free were using wrong next block location