Double-free in DesktopServerWatcher::execute() (lines 136-146),
acknowledged by a developer comment in the source.
Flow:
Developer comment at line 142: "A potential crash. The channels can
be used (see onReconnect()) after these destroyings."
Attached PoC calls free() twice on the same pointer via msvcrt.dll
and exits with STATUS_HEAP_CORRUPTION (0xC0000374).
Fix: null ownSidePipeChanTo/From after onReconnect() returns.
Version: 2.8.87.