In this case mp->lowoff is 1 but mp->lowmsg equal mp->hghmsg equal 0.
Hence we have an access at mp->msgstats[-1], which corrupted our mem.
Gdb hadn't helped me for this, but valgrind showed me the problem.
** If sequence is new, or zero flag is set, then first
** clear the bit for this sequence from all messages.
*/
- if (new_seq || zero) {
+ if (mp->nummsg>0 && (new_seq || zero)) {
for (j = mp->lowmsg; j <= mp->hghmsg; j++)
clear_sequence(mp, i, j);
}