id	summary	reporter	owner	description	type	status	milestone	component	version	severity	resolution	keywords	cc
189	tss::set(0) leads to double-free	perfecthash	bill_kempf	"{{{
This bug only occurs on non-pthreads platforms such as
Win32 where no automatic destructor is available.  I
declared a variable:

boost::thread_specific_ptr<X> pX;

and initialized it:

pX.reset(new X);

Later, I did

pX.reset();

Subsequently, when pX went out of scope, it tried to
delete the X instance again.  It's easy to see why. 
tss::set checks

if (value && m_cleanup) {
   update cleanup handler table
}

So if value is NULL, the original cleanup handler is
left lying around.

}}}"	Bugs	closed		None	None		Fixed