j
k
j a
j l
The pointer might be freed by RPC NdrPointerFree, which will try to use a dedicated free call for the array elements, and fail.
Found by running advapi32:service test with warn+heap.
Back to the thread
Back to the list