It looks like other people have encountered the same issue, and also traced it to the same line of code that my binary search revealed. It's consistent with my finding that icon_name and name are pointing to the same pointer, and are being free'd twice.
https://bugzilla.redhat.com/show_bug.cgi?id=823499 Can anyone provide some insight into the reason for the original patch? My google-foo appears insufficient to find the answer. Jonathan
