#2 malloc() memory corruption

[Schmidt Anton]

An error appears when handling POST requests in [mod_nps]. I suppose that its not only caused by [mod_nps], because I tried to rewrote the code, but it did not fix the error. I think I should check the entire code and take care about all memory allocations in it. These are the contents of the error:

ccgid: malloc.c:3096: sYSMALLOc: Assertion `(old_top == (((mbinptr) (((char *) &((av)->bins[((1) - 1) * 2])) - __builtin_offsetof (struct malloc_chunk, fd)))) && old_size == 0) || ((unsigned long) (old_size) >= (unsigned long)((((__builtin_offsetof (struct malloc_chunk, fd_nextsize))+((2 * (sizeof(size_t))) - 1)) & ~((2 * (sizeof(size_t))) - 1))) && ((old_top)->size & 0x1) && ((unsigned long)old_end & pagemask) == 0)' failed.
Aborted

[Schmidt Anton]

It seems that bug appears only when ccgid is built with 'mod_nps'

[Schmidt Anton]

No, it's not :) It's just appeared in functions that parse some data (GET,
POST). Heap crushes because of incorrect freeing of allocated memory chunks
after return from these functions.