Symbolic XOR
Fix double-free in freememsyms()