Esme Povirk (@madewokherd) commented about dlls/uiautomationcore/uia_provider.c:
{ PostMessageW(provider_thread.hwnd, WM_UIA_PROVIDER_THREAD_STOP, 0, 0); CloseHandle(provider_thread.hthread);
if (!list_empty(&provider_thread.nodes_list))
WARN("Provider thread shutdown with nodes still in the list\n");
This shouldn't be possible, should it? If not, it should be an ERR. If it is intended to be possible, the nodes here should probably be invalidated.