Dr. Gregory Parker, Department of Diagnostic Engineering
Go back to the board. Symptom: the object was allocated as an
NSPathStore2. Symptom: the object’sisapointer is now0xa0050000, which is notNSPathStore2. What should theisapointer’s value have been?otoolandobjc_getClass()agreed: the correctisapointer should have been0xa005f198.0xa0050000is suspiciously similar. Theory: something had cleared two bytes of this object, leaving a nonsense isa pointer.@"tzm-Latn"was a red herring.
Great post.