testDoubleFree.c

#include <windows.h>

#define NUMPTRS		10

int main(int argc, char **argv) {
	char	*foo[NUMPTRS];
	int		i;

	Sleep(10000);

	for (i = 0; i < NUMPTRS; i++) {
		foo[i] = malloc(256);
		printf("%d: 0x%08x\n", i, foo[i]);
	}
	for (i = 0; i < NUMPTRS; i+=2) {
		free(foo[i]);
	}
	free(foo[i-2]);
}