operator new fault in cocos2d-x

Code:

void HelloWorld::projCollision(float dt){
CCMutableArray<BulletSprite*> projectilesToDelete = new CCMutableArray<BulletSprite>;
CCMutableArray<BulletSprite
>::CCMutableArrayIterator it, jt;
for ; it != _projEnemy~~>end; it++)
{
BulletSprite **projectile =*it;
CCRect projectileRect = CCRectMake.x
~~ .width/2),
projectile~~>getPosition.y
~~ .height/2),
projectile~~>getContentSize.width,
projectile~~>getContentSize.height);
CCMutableArray<BulletSprite
>*projectilesToDelete1 = new CCMutableArray<BulletSprite>;

for (jt = projectiles->begin; jt !=projectiles->end(); jt)
{

fault log:
ntdll.dll!7c92120e
ntdll.dll!7c98e161
ntdll.dll!7c96aead
ntdll.dll!7c94a1f6
ntdll.dll!7c98eec8
ntdll.dll!7c96b3d4
ntdll.dll!7c938831
libcocos2d.dll!cocos2d::CCSize::CCSize 行75 C**
0013f36c()
msvcr90d.dll!heap_alloc_base 行105 + 0x28 字节 C
msvcr90d.dll!heap_alloc_dbg_impl(unsigned int nSize=40, int nBlockUse=1, const char * szFileName=0x00000000, int nLine=0, int * errno_tmp=0x0013f3c0) 行427 + 0x9 字节 C+
msvcr90d.dll!_nh_malloc_dbg_impl 行239
0x19 字节 C*+
msvcr90d.dll!_nh_malloc_dbg 行296* 0x1d 字节 C*+
msvcr90d.dll!malloc 行56* 0x15 字节 C*+
msvcr90d.dll!operator new 行59* 0x9 字节 C*+

tank.win32.exe!HelloWorld::projCollision 行1266* 0x7 字节 C*+
libcocos2d.dll!cocos2d::CCTimer::update 行162* 0x1a 字节 C*+
libcocos2d.dll!cocos2d::CCScheduler::update 行801* 0x1e 字节 C*+
libcocos2d.dll!cocos2d::CCDirector::drawScene 行206* 0x1f 字节 C*+
libcocos2d.dll!cocos2d::CCDisplayLinkDirector::mainLoop 行952 C*+
libcocos2d.dll!cocos2d::CCApplication::run() 行66 + 0x20 字节 C*+
tank.win32.exe!wWinMain 行33* 0x19 字节 C*+
tank.win32.exe!_*tmainCRTStartup 行574 + 0x35 字节 C
tank.win32.exe!wWinMainCRTStartup 行399 C
kernel32.dll!7c816fe7
msvcr90d.dll!vsnprintf_helper* outfn=0xccc35e10, char * string=0x24448bcc, unsigned int count=3766520580, const char * format=0xc3000000, localeinfo_struct * plocinfo=0xcccccccc, char * ap=0x24448bcc) 行115 0x51 字节 C
c483d0ff()

Why following sentence will introduce the fault?

CCMutableArray<BulletSprite*> *projectilesToDelete1 = new CCMutableArray<BulletSprite*>;

And the when the new operator return the value, 0xcccccccc is carried which is a special one.

Can anyone help me on this?

Thanks a lot.