a malloc'ed pointer and it tries to realloc(3) it if it had to grow it before. su(1) gave it a pointer from the stack which caused realloc to core dump.