but just reading through, is the intent the pass the pointer-pointer and allocate a size of

cnt

? that's given a single-pointer