tcmalloc crash

[hy kam]

Hi 

during deallocation memory, we got the crash as below.

I don't know what kinds of problem happened on below part 

I heard that tcmalloc manage memory using the linked list and according to below "SLL_Next t=0x0", it seems like that linked list was broken at 17 list.

it is just my guessing. 

could you explain detail about below trace ?

#18 0xb6daadc4 in dumphooks_run (signo=11) at /usr/src/debug/crl-errman/0.7.33+gitAUTOINC+bc9e9ff4c0-r2.0.rcs20/git/eri/eri_ng.c:911
#19 <signal handler called>
#20 tcmalloc::SLL_Next (t=0x0) at /usr/src/debug/gperftools/2.6.3-r0/gperftools-2.6.3/src/linked_list.h:45
#21 tcmalloc::SLL_PopRange (end=<synthetic pointer>, start=<synthetic pointer>, N=17, head=0x3740bd0) at /usr/src/debug/gperftools/2.6.3-r0/gperftools-2.6.3/src/linked_list.h:88
#22 tcmalloc::ThreadCache::FreeList::PopRange (end=<synthetic pointer>, start=<synthetic pointer>, N=17, this=0x3740bd0) at /usr/src/debug/gperftools/2.6.3-r0/gperftools-2.6.3/src/thread_cache.h:238
#23 tcmalloc::ThreadCache::ReleaseToCentralCache (this=this@entry=0x3740980, src=src@entry=0x3740bd0, cl=<optimized out>, N=17, N@entry=32) at /usr/src/debug/gperftools/2.6.3-r0/gperftools-2.6.3/src/thread_cache.cc:206
#24 0xb22e3a1c in tcmalloc::ThreadCache::ListTooLong (this=0x3740980, list=0x3740bd0, cl=<optimized out>) at /usr/src/debug/gperftools/2.6.3-r0/gperftools-2.6.3/src/thread_cache.cc:164