And it turned out to be a use-after-free() bug, which is now squashed. Phew :)
1
Replying to @diodesign
@diodesign This is why a free() which poisons is a good thing. When all your pointers turn into 0xDEADBEEF it's pretty obvious what's up.

Oct 16, 2011 ยท 1:14 AM UTC

1