!Reproducible! heap assert in msiexec, when installing Tortoise Git 1.8.16.0

Reproduction steps

• run msi setup of "Tortoise Git 1.8.16.0" from rapps
• in the dlg where you can select/deselect components, now comes the crucial step
• select some component in that dlg, the blue selection rectangle must be over a component or the bug won't happen later, see important.png
• now and not earlier click "browse" for installation target dir
• the browsefor destination dialog will be affected by "_BrowseProperty"-issue CORE-15315 (you are on the perfect path then)
• ignore that fact and just click the button to browse to parent directory
• It will give a heap assertion, it happens reproducibly for me

I took a backtrace with break-on-first-chance enabled in the end of the log
0.4.13-RC-42-g05225f1_msiexec_heapassert.log
0.4.13-RC-42-g05225f1_msiexec_heapassert.png

Here is an exact reproduction video that you can and must follow click by click
click-by-click-repro.webm