Hi, So any comments or questions on this report? Any reason there hasn't yet been a response? To summarize: Handles are marked as -1 (not as NULL) if a lookup fails. The code should look for that -1 before trying to free the handle or it will call free() with an invalid pointer. Upstream cvs still has this bug, would it be helpful if I forwarded this upstream? -David