curl: heap-use-after-free in curl_easy_cleanup() called from callback_H1:3833577
## Summary: `Curl_close()` (`lib/url.c:214`) calls `curl_multi_remove_handle(data->multi, data)` and ignores the return value. When `curl_easy_cleanup()` is invoked from within a write/read/progress/header callback, `multi->in_callback` is `TRUE`, so `curl_multi_remove_handle...