Fix another heap-use-after-free in pause menu.