Race conditions on session identifier freeing can lead to double free() operation.
vulners.com/securityvulns/securityvulns:doc:16389
vulners.com/securityvulns/securityvulns:doc:16390