Struct Allocation in C Causing Memory Overwrite (I Think)

I thought I understood this stuff, but I'm stumped here.

Given a struct declared as:

typedef struct _Thing {
  uint32_t type;
  struct _Thing *children;
  unsigned long childCount;
  char *description;

  union {
    uint32_t thirtyTwoBitValue;
    char *nameValue;
  } data;

} Thing;

I have a method that re allocates an array to accommodate adding a new Thing object. It looks like this:

void AddTopLevelThing(Thing *thing)
{
  Thing *oldThings = things;
  things = malloc(sizeof(Thing) * thingCount +1);

  // Add any existing things to the new array
  for (int i = 0; i < thingCount; ++i) {
    things[i] = oldThings[i];
  }

  // Add the newest thing to the new array
  things[thingCount] = *thing;

  // Increment the thing count
  thingCount++;
}

Note: things and thingCount are globals. Don't freak. ;-) Oh, and I also realize this is leaking. One problem at a time...

In order to create my Thing objects, I've created an initializer function. It looks like this:

Thing* CreateThingWithDescription(char *description)
{
  Thing *thing = malloc(sizeof(Thing));
  if (thing == NULL) {
    printf("Bad thing!, Bad!\n");
    return NULL;
  }

  // Initialize everything in the structure to 0
  memset(thing, 0, sizeof(Thing));

  thing->children = NULL;
  thing->description = strdup(description);

  return thing;
}

To complicate things (no pun intended), a Thing object has an array of children that gets reallocated (grown) when new objects are added to it. It looks like this:

void AddChildThingToThing(Thing *parent, Thing *child)
{
  Thing *oldChildren = parent->children;
  parent->children = malloc(sizeof(Thing) * parent->childCount + 1);
  if (parent->children == NULL) {
    printf("Couldn't allocate space for thing children.\n");
    parent->children = oldChildren;
    return;
  }

  // Add any existing child things to the new array
  for (int i = 0; i < parent->childCount; ++i) {
    parent->children[i] = oldChildren[i];
  }

  // Add the newest child thing to the new array
  parent->children[parent->childCount] = *child;  

  // Increment the child count
  parent->childCount = parent->childCount + 1;
}

Anyhow, I'm having a tough time figuring out why when I'm finished creating my structures and adding child structures that they are often zeroed out even though I validated their creation (in the debugger) when they were created. When the code in my main finishes running, I should have a tree structure, but instead it's just a mangled mess of values that I don't recognize or understand--which is why I believe things are getting overwritten.

Anyhow, I'm hoping I'm just overlooking something simple.

Here is my main if you want to see how I build my object hierarchy:

int main(int argc, const char * argv[])
{
  things = NULL;
  thingCount = 0;

  Thing *thing = CreateThingWithDescription("This is thing 1");
  SetThingName(thing, "Willy Johnson");
  AddTopLevelThing(thing);
  Thing *child = CreateThingWithDescription("This is child thing 1");
  SetThingName(child, "Willy's Son");
  AddChildThingToThing(thing, child);
  child = CreateThingWithDescription("This is child thing 2");
  SetThingName(child, "Willy's Daughter");
  AddChildThingToThing(thing, child);

  thing = CreateThingWithDescription("This is thing 2");
  SetThingValue(thing, 700);
  AddTopLevelThing(thing);
  child = CreateThingWithDescription("This is child thing 3");
  SetThingValue(child, 1024);
  AddChildThingToThing(thing, child);

  for (int i = 0; i < thingCount; ++i) {
    PrintThing(&things[i]);
  }
  return 0;
}

Note: this is just a demo project to figure out what's going on.