Hi David, The hash_create function can fail, in which case it returns NULL. Neither of the two uses in fa.c handle that case, and will dereference NULL via the subsequent call to hash_set_allocator.