Fix a crash bug by freeing tmp_share

tmp_share doesn't have col_flags and col_type. It seems that
mrn_table.cpp provides an API that creates tmp_share.