This crash occurs in AcpiPsDeleteParseTree() called from
AcpiPsExecuteMethod() when on the testing conditions a call
to AcpiPsAllocOp() in AcpiPsCompleteThisOp() results in a failure.

The crash occurs due to presence in the initial Method Op parse
tree of some Op object previously deleted according with Allocate
error processing branch in AcpiPsCompleteThisOp (see below):

AcpiPsCompleteThisOp (
...
        default:

            ReplacementOp = AcpiPsAllocOp (AML_INT_RETURN_VALUE_OP);
            if (!ReplacementOp)
            {
                goto AllocateError;
            }
...
AllocateError:

    /* Always delete the subtree, even on error */

    AcpiPsDeleteParseTree (Op);
    return_ACPI_STATUS (AE_NO_MEMORY);

On the normal conditions when AcpiPsAllocOp above succeeds the
ReplacementOp relocates the Op in the initial Method Op parse tree
and the next call to AcpiPsDeleteParseTree in AcpiPsExecuteMethod
is processed smoothly.

It looks like the comment "Always delete the subtree, even on error"
is not exactly substantiated. When on the considered testing conditions
the call to AcpiPsDeleteParseTree on the AllocateError branch is avoided
no any problem occurs.


INTERNAL API TS BUG NUMBER:

             44