eap-marker data structures are modified all over the place... it's chaos. The bottom line is: A arena gets mangled, so the B-held borrowed handle X has a high chance of pointing, now, to garbage: Not unmapped garbage; not into a SHM-pool that's magically gone &ndash; it's still there &ndash; so there's not necessarily a SEGV as a result; just garbage in the ~sense of accessing <code>free()</code>d (not un-<code>mmap()</code>ped) memory.</p>
<p >(Update: I've spoken to the SHM-jemalloc author echan, and the 