http://gambaswiki.org/bugtracker/edit?object=BUG.1025&from=L21haW4- Comment #2 by Benoît MINISINI: This is by design. Free() is a just a call to the libc free() method, and so the freed address cannot be checked. Benoît MINISINI changed the state of the bug to: Rejected.