Thanks Jamie, that saved me a lot of research. However, I am wondering how you found these kind of bugs in the iOS (over-releasing the returned strings)?