* Anastasia Belova: > Double free happens when work_tree = NULL: before the check > and after parse_bracket_exp_free_return free_charset() is called. > Move first call after the check and goto. Do you have a test case for this? Thanks, Florian