[WebPositive] Double-free while browsing Google Maps
|Reported by:||waddlesplash||Owned by:||pulkomandy|
|Has a Patch:||no||Platform:||All|
This one is particularly tricky to reproduce. I couldn't get it to happen on x64 with the guarded heap (does the guarded heap track double frees properly?) but it has occured various times on 32-bit with the debug heap and with rpmalloc.