- Mark exactly the pages of a new heap region: whole bytes of the page
bitmap claimed up to seven unrelated pages, whose blocks HeapFree then
took for its own.
- Link free lists through the block header instead of the payload, so a
write through a stale pointer cannot redirect the next allocation.
- Enable the guest-side paths only with RAVEN_GUEST_HEAP: Bitvise SSH
Client given -host still crashed on a corrupted block in 3 of 125
starts with them, and in none of 116 without. native_x86_heap opts in.
Assisted-by: Claude Code:claude-opus-5-5
AI-Scope: not stated in the submission, which credited the tool as a co-author
mirkobrombin