When copying an attribute, url information of stype's composite is overwritten with memcpy.
This causes double free by deleting the wrong string in freeNodeStyle.
//Copy style attribute;
memcpy(to->style, from->style, sizeof(SvgStyleProperty));
+ //Copy style composite attribute (clip-path, mask, ...)
+ if (from->style->comp.url) to->style->comp.url = new string(from->style->comp.url->c_str());
+
//Copy node attribute
switch (from->type) {
case SvgNodeType::Circle: {