gobject-introspection/scannerparser.y use after free
Both this:
ctype_free (CType * type) {
g_free (type);
g_free (type->name);
And:
csymbol_free (CSymbol * symbol) {
...
g_free (symbol);
g_slist_foreach (symbol->directives, (GFunc)cdirective_free, NULL);
Uses type/symbol after being freed.