Created attachment 1709 [details]
Patch for double free issue in LoadWAVStream

In 
static SDL_RWops *LoadWAVStream (SDL_RWops *src, SDL_AudioSpec *spec,
                    long *start, long *stop)
{ 

/* Decode the audio data format */
    format = (WaveFMT *)chunk.data; //  Now both point to the same storage.
    if ( chunk.magic != FMT ) {
        SDL_free(chunk.data);  // frees chunk.data
        Mix_SetError("Complex WAVE files not supported");
        was_error = 1;
        goto done;
    }



done:
    if ( format != NULL ) {
        SDL_free(format); // frees pointer format which has already been freed.
    }
    if ( was_error ) {
        return NULL;
    }
    return(src);
}

Patch is attached for solution.

Cheers!!!

/Nitz