Progress on the bzf->buf double free, but something is still wrong.