Comment 14 for bug 1735980

hm... you are right. Dammn...

I guess there are two bugs: A wrong calculation for undo set origin and the 'heap use after free'? Or do they stick together?

If you, or some one else, could investigate i would be fine :-)