This line: registrar(webStandardName, create, fastStrDup(canonicalConverterName)); is creating a copy of canonicalConverterName which never seems to be freed.
*** This bug has been marked as a duplicate of bug 118505 ***