c - C中的动态数组无法释放内存

Question

在释放 freeArray 中的 g.content.array 期间，程序崩溃。怎么了？

  #define STR_SHORT 256

    struct DirFileArray {
      struct dirFile *array;
      size_t used;
      size_t size;
    };

    struct dirFile
    {
        int  contentType ;
        char name [STR_SHORT];
        struct DirFileArray  content;
    };

    struct dirFile * getDirFile(char * fileName)
    {
        struct dirFile * f=  (struct dirFile *) malloc(sizeof(struct dirFile ) );
        f->contentType=TYPE_NONE;
        strcpy(f->name,fileName);
        f->content.array=NULL ;

        return f;
    };

void freeArray(struct DirFileArray *a) {
  if (a->array)
  {
  free(a->array);
  a->array = NULL;
  a->used = a->size = 0;
  }
}
    void insertArray(struct DirFileArray *a, struct dirFile * element)
    {

      if (a->used == a->size)
          {
          a->size ++;
          a->array =realloc(a->array, a->size * sizeof(struct dirFile));
          }
      a->array[a->used++] = *element;
    }

    void killDirFile(struct dirFile * value)
    {

        int i;
        for (i=0; i<value->content.used;i++ )
            {

            killDirFile( & value->content.array[i]);

            }

        printf("freeing array of %s\n", value->name);
        freeArray(&value->content);
        printf("freeing %s\n", value->name);

        free(value);
        value=NULL;

    }

    int main(void)
    {
        struct  dirFile * g  =  getDirFile("ggg");
        struct  dirFile * c  =  getDirFile("ccc");
        insertArray(&g->content,c);
        killDirFile(g);

    }

输出:

freeing array of ccc
freeing ccc
freeing array of ccc
freeing ccc
freeing array of ggg
*** glibc detected *** /home/pro/fff/Debug/updDown: corrupted double-linked list: 0x00000000006e9160 ***

Answer 1

看起来used和size从未初始化过。