fix bug

src/client/src/tscSubquery.c

@@ -2732,7 +2732,7 @@ void tscHandleSubqueryError(SRetrieveSupport *trsupport, SSqlObj *pSql, int numO
       SSqlObj *userSql = ((SRetrieveSupport*)pParentSql->param)->pParentSql;
 
       tscFreeSubobj(userSql);      
-      tfree(pSql->pSubs);
+      tfree(userSql->pSubs);
 
       pParentSql->res.code = TSDB_CODE_SUCCESS;
       pParentSql->retry++;

src/client/src/tscUtil.c

@@ -3768,7 +3768,7 @@ static void tscSubqueryCompleteCallback(void* param, TAOS_RES* tres, int code) {
     SSqlObj *userSql = ((SRetrieveSupport*)pParentSql->param)->pParentSql;
 
     tscFreeSubobj(userSql);    
-    tfree(pSql->pSubs);
+    tfree(userSql->pSubs);
 
     pParentSql->res.code = TSDB_CODE_SUCCESS;
     pParentSql->retry++;