id,summary,reporter,owner,description,type,status,milestone,component,version,severity,resolution,keywords,cc
189,tss::set(0) leads to double-free,perfecthash,bill_kempf,"{{{
This bug only occurs on non-pthreads platforms such as
Win32 where no automatic destructor is available.  I
declared a variable:

boost::thread_specific_ptr<X> pX;

and initialized it:

pX.reset(new X);

Later, I did

pX.reset();

Subsequently, when pX went out of scope, it tried to
delete the X instance again.  It's easy to see why. 
tss::set checks

if (value && m_cleanup) {
   update cleanup handler table
}

So if value is NULL, the original cleanup handler is
left lying around.

}}}",Bugs,closed,,None,None,,Fixed,,