add failing "frees a read buffer" spec