Comment 2 for bug 500218

I have almost exacly the same error, the only thing that has changed is pointers address:

[quintasan@nightwalker ~]% kvm -m 512 -hda /home/quintasan/Sauce/kvm/lucid.img
*** glibc detected *** kvm: free(): invalid pointer: 0x000000000296eb10 ***
======= Backtrace: =========
/lib/libc.so.6[0x7f376b08fdd6]
kvm[0x42545a]
kvm[0x4254ef]
kvm[0x4682ab]
kvm[0x469971]
kvm[0x46b011]
kvm[0x424c25]
kvm[0x424d13]
kvm[0x4262a6]
/lib/libpthread.so.0[0x7f376cd94a04]
/lib/libc.so.6(clone+0x6d)[0x7f376b0f97bd]
======= Memory map: ========
00400000-00628000 r-xp 00000000 08:01 125257 /usr/bin/qemu-system-x86_64
00827000-00828000 r--p 00227000 08:01 125257 /usr/bin/qemu-system-x86_64
00828000-00830000 rw-p 00228000 08:01 125257 /usr/bin/qemu-system-x86_64
00830000-00c45000 rw-p 00000000 00:00 0
0296a000-02d25000 rw-p 00000000 00:00 0 [heap]
7f3743ae9000-7f3743aff000 r-xp 00000000 08:01 1348 /lib/libgcc_s.so.1
7f3743aff000-7f3743cfe000 ---p 00016000 08:01 1348 /lib/libgcc_s.so.1
7f3743cfe000-7f3743cff000 r--p 00015000 08:01 1348 /lib/libgcc_s.so.1
7f3743cff000-7f3743d00000 rw-p 00016000 08:01 1348 /lib/libgcc_s.so.1
7f3743d00000-7f3743d05000 r-xp 00000000 08:01 7464 /usr/lib/libXfixes.so.3.1.0
7f3743d05000-7f3743f04000 ---p 00005000 08:01 7464 /usr/lib/libXfixes.so.3.1.0
7f3743f04000-7f3743f05000 r--p 00004000 08:01 7464 /usr/lib/libXfixes.so.3.1.0
7f3743f05000-7f3743f06000 rw-p 00005000 08:01 7464 /usr/lib/libXfixes.so.3.1.0
7f3743f06000-7f3743f0f000 r-xp 00000000 08:01 7484 /usr/lib/libXrender.so.1.3.0
7f3743f0f000-7f374410e000 ---p 00009000 08:01 7484 /usr/lib/libXrender.so.1.3.0
7f374410e000-7f374410f000 r--p 00008000 08:01 7484 /usr/lib/libXrender.so.1.3.0
7f374410f000-7f3744110000 rw-p 00009000 08:01 7484 /usr/lib/libXrender.so.1.3.0
7f3744110000-7f3744119000 r-xp 00000000 08:01 7456 /usr/lib/libXcursor.so.1.0.2
7f3744119000-7f3744318000 ---p 00009000 08:01 7456 /usr/lib/libXcursor.so.1.0.2
7f3744318000-7f3744319000 r--p 00008000 08:01 7456 /usr/lib/libXcursor.so.1.0.2
7f3744319000-7f374431a000 rw-p 00009000 08:01 7456 /usr/lib/libXcursor.so.1.0.2
7f374431a000-7f3744367000 rw-p 00000000 00:00 0
7f37443ec000-7f374442b000 r--p 00000000 08:01 11280 /usr/lib/locale/pl_PL.utf8/LC_CTYPE
7f374442b000-7f374442c000 r--p 00000000 08:01 11285 /usr/lib/locale/pl_PL.utf8/LC_NUMERIC
7f374442c000-7f374442d000 r--p 00000000 08:01 88425 /usr/lib/locale/pl_PL.utf8/LC_TIME
7f374442d000-7f374451a000 r--p 00000000 08:01 88426 /usr/lib/locale/pl_PL.utf8/LC_COLLATE
7f374451a000-7f374451b000 r--p 00000000 08:01 88449 /usr/lib/locale/pl_PL.utf8/LC_MONETARY
7f374451b000-7f374451c000 r--p 00000000 08:01 93632 /usr/lib/locale/pl_PL.utf8/LC_MESSAGES/SYS_LC_MESSAGES
7f374451c000-7f374451d000 r--p 00000000 08:01 11559 /usr/lib/locale/pl_PL.utf8/LC_PAPER
7f374451d000-7f374451e000 r--p 00000000 08:01 11284 /usr/lib/locale/pl_PL.utf8/LC_NAME
7f374451e000-7f374451f000 r--p 00000000 08:01 93633 /usr/lib/locale/pl_PL.utf8/LC_ADDRESS
7f374451f000-7f3744520000 r--p 00000000 08:01 93634 /usr/lib/locale/pl_PL.utf8/LC_TELEPHONE
7f3744520000-7f3744521000 r--p 00000000 08:01 11282 /usr/lib/locale/pl_PL.utf8/LC_MEASUREMENT
7f3744521000-7f3744528000 r--s 00000000 08:01 9668 /usr/lib/gconv/gconv-modules.cache
7f3744528000-7f3744529000 r--p 00000000 08:01 93635 /usr/lib/locale/pl_PL.utf8/LC_IDENTIFICATION
7f3744529000-7f374458c000 rw-p 00000000 00:00 0
7f37445f8000-7f37656df000 rw-p 00000000 00:00 0
7f37656df000-7f37656e0000 ---p 00000000 00:00 0
7f37656e0000-7f3765ee0000 rw-p 00000000 00:00 0
7f3765ee0000-7f3765eec000 r-xp 00000000 08:01 1377 /lib/libnss_files-2.10.1.so
7f3765eec000-7f37660eb000 ---p 0000c000 08:01 1377 /lib/libnss_files-2.10.1.so
7f37660eb000-7f37660ec000 r--p 0000b000 08:01 1377 /lib/libnss_files-2.10.1.so
7f37660ec000-7f37660ed000 rw-p 0000c000 08:01 1377 /lib/libnss_files-2.10.1.so
7f37660ed000-7f37660ef000 r-xp 00000000 08:01 1362 /lib/libkeyutils-1.2.so
7f37660ef000-7f37662ee000 ---p 00002000 08:01 1362 /lib/libkeyutils-1.2.so
7f37662ee000-7f37662ef000 r--p 00001000 08:01 1362 /lib/libkeyutils-1.2.so
7f37662ef000-7f37662f0000 rw-p 00002000 08:01 1362 /lib/libkeyutils-1.2.so
7f37662f0000-7f37662f7000 r-xp 00000000 08:01 8126 /usr/lib/libkrb5support.so.0.1
7f37662f7000-7f37664f6000 ---p 00007000 08:01 8126 /usr/lib/libkrb5support.so.0.1
7f37664f6000-7f37664f7000 r--p 00006000 08:01 8126 /usr/lib/libkrb5support.so.0.1
7f37664f7000-7f37664f8000 rw-p 00007000 08:01 8126 /usr/lib/libkrb5support.so.0.1
7f37664f8000-7f37664fb000 r-xp 00000000 08:01 1329 /lib/libcom_err.so.2.1
7f37664fb000-7f37666fa000 ---p 00003000 08:01 1329 /lib/libcom_err.so.2.1
7f37666fa000-7f37666fb000 r--p 00002000 08:01 1329 /lib/libcom_err.so.2.1
7f37666fb000-7f37666fc000 rw-p 00003000 08:01 1329 /lib/libcom_err.so.2.1
7f37666fc000-7f3766725000 r-xp 00000000 08:01 7888 /usr/lib/libk5crypto.so.3.1
7f3766725000-7f3766924000 ---p 00029000 08:01 7888 /usr/lib/libk5crypto.so.3.1
7f3766924000-7f3766926000 r--p 00028000 08:01 7888 /usr/lib/libk5crypto.so.3.1
7f3766926000-7f3766927000 rw-p 0002a000 08:01 7888 /usr/lib/libk5crypto.so.3.1
7f3766927000-7f37669d5000 r-xp 00000000 08:01 8124 /usr/lib/libkrb5.so.3.3
7f37669d5000-7f3766bd5000 ---p 000ae000 08:01 8124 /usr/lib/libkrb5.so.3.3zsh: abort kvm -m 512 -hda /home/quintasan/Sauce/kvm/lucid.img