Identifying and classifying the exit points.

You're using the same hook that the compiler uses to call std::terminate.

Don't get lost on your walk down memory lane.

What security boundary did you cross?

Its original client had an image list.

How much there is, and how is it changing.

There was no buffer returned, so there's nothing to free anyway.

If it's local-only, then it can't be remote.

Failing to understand your audience.

Halfway there.