It’s looks like new[]/delete mismatch in class CCNotificationObserver(v2.0.2):
CCNotificationObserver::CCNotificationObserver(CCObject *target,
SEL_CallFuncO selector,
const char *name,
CCObject *obj)
{
m_target = target;
m_selector = selector;
m_object = obj;
m_name = new char[strlen(name)+1];
...
}
CCNotificationObserver::~CCNotificationObserver()
{
if (m_name)
delete m_name;
}