-Thtml double free in tcache 2; Abort

[Alejandro Colomar]

Hi Branden,

In the git HEAD of the man pages repository, I can reproduce a bug in
groff -Thtml:

alx@debian:~/tmp/groff$ cat keyrings.7 
.TH a s d f
.SH foo
.TP
foobar
alx@debian:~/tmp/groff$ troff -man -Thtml  <./keyrings.7 >/dev/null
free(): double free detected in tcache 2
Aborted
alx@debian:~/tmp/groff$ troff --version
GNU troff (groff) version 1.23.0.1234-a0890

Maybe this is a reproducer of an already-known bug, or maybe it's a new
one.

Have a lovely night!
Alex

-- 
<https://www.alejandro-colomar.es/>

signature.asc
Description: PGP signature