Comment 7 for bug 685785

Bug 658777 was a different issue, but still one that could have caused a similar crash, and I fixed that one already.

We could just initialize the pointer that I think is being wrongly freed here, but the condition that causes it to happen shouldn't really occur anyway, so I'd like to try and figure that out too. How often does this normally happen?