Prevent double-free (fixed vs clang@181334)