Crash when unequipping item with True Seeing

[Shad000w]

To Reproduce

• Boot up attached module in nwserver (could not reproduce in single player) repromodule34.zip
• Enter game with any character, make sure ILR is off
• Pick up helmet from the floor. It has true seeing property. Do not equip yet.
• Move over the corner so that Driders sees you and start casting, they will cast ultravision followed by darkness.
• Once you are under effect of darkness, equip the helmet with TS.
• Run away from the darkness AOE.
• Unequip the true seeing helmet -> crash.

Crash Dump

console log:

$ ./run-bug.sh
Neverwinter Nights Server
Build: 8193.34 [8507d5a9]
Copyright BioWare Corp 1998-2004
Registering crash signal handlers.

Server: Loading...
Working Directory For Game Install Is: /home/sh/nwn
Working Directory For Your Resources Is: /home/sh/.local/share/Neverwinter Nights
Server: Running...

Server: Loading module "repromodule34"...
Server: Module loaded
free(): double free detected in tcache 2
Please go to https://beamdog.atlassian.net/servicedesk/ and report this crash to the Neverwinter Nights bug reporter.

Please describe the conditions within which you crashed, indicate your current game version, and attach the following files:

- The error report file at /home/sh/.local/share/Neverwinter Nights/nwserver-crash-1695130879.log../run-bug.sh: line 6: 11730 Aborted                 (core dumped) ./nwserver-linux -module "repromodule34"

crash dump: nwserver-crash-1695130879.log

Specifics

• OS: Any
• Game build: .34
• Distro platform: irrelevant
• Repro Rate: 100%
• Content overrides: irrelevant
• Regression: yes, doesn't crash in 1.69

[niv]

Hi, thanks for the report. Does this happen on .35 as well? (Latest stable - .34 is outdated at this point)

[Shad000w]

Hi, thanks for the report. Does this happen on .35 as well? (Latest stable - .34 is outdated at this point)

Umm, you did some changes to it in 35 or why do you think it got fixed itself?

I made a decent repro, it takes about 2 minutes to test it. Why do you require this if you are not even willing to spend 2 minutes to check that repro module?

Anyway. It happens in 35-40 as well.