Crash in RemapProcessor::perform_remap

In trunk, and sometimes on 2.0.x branch (not as frequent, cause it crashes in another place), I get this crasher:

#0 0x081b2b05 in RemapProcessor::perform_remap (this=0x8406418, cont=0x469d1060,
s=0x469d10b0) at ../../libinktomi++/Allocator.h:271
271 ((ink64 *) ptr)[i] = ((ink64 *) & this->proto.typeObject)[i];
(gdb) bt
#0 0x081b2b05 in RemapProcessor::perform_remap (this=0x8406418, cont=0x469d1060,
s=0x469d10b0) at ../../libinktomi++/Allocator.h:271
#1 0x08161000 in HttpSM::do_remap_request (this=0x469d1060, run_inline=true)
at HttpSM.cc:3992
#2 0x0817388f in HttpSM::set_next_state (this=0x469d1060) at HttpSM.cc:7239
#3 0x0815cb2b in HttpSM::call_transact_and_set_next_state (this=0x469d1060, f=0)
at HttpSM.cc:7198
#4 0x08172eb8 in HttpSM::handle_api_return (this=0x469d1060) at HttpSM.cc:1713
#5 0x0817400f in HttpSM::set_next_state (this=0x469d1060) at HttpSM.cc:7232
#6 0x0815cb2b in HttpSM::call_transact_and_set_next_state (this=0x469d1060,
f=0x8184da0 <HttpTransact::ModifyRequest(HttpTransact::State*)>) at HttpSM.cc:7198
#7 0x08163d0d in HttpSM::state_read_client_request_header (this=0x469d1060,
event=100, data=0x8de74bc) at HttpSM.cc:852
#8 0x08163ead in HttpSM::setup_client_read_request_header (this=0x469d1060)
at HttpSM.cc:703
#9 0x0817042a in HttpSM::state_add_to_list (this=0x469d1060, event=0, data=0x0)
at HttpSM.cc:535
#10 0x0814d544 in HttpClientSession::new_transaction (this=0x46305330)
at HttpClientSession.cc:168
#11 0x0814d30a in HttpClientSession::state_keep_alive (this=0x46305330, event=100,
data=0x8de74bc) at HttpClientSession.cc:404
#12 0x082d6a05 in read_signal_and_update (event=100, vc=0x8de7430)
at ../../iocore/eventsystem/I_Continuation.h:147
#13 0x082d9b0b in read_from_net (nh=0x405d2fd0, vc=0x0, thread=<value optimized out>)
at UnixNetVConnection.cc:340
#14 0x082d1ed7 in NetHandler::mainNetEvent (this=0x405d2fd0, event=5, e=0x8a24640)
at UnixNet.cc:462
#15 0x082fab71 in EThread::process_event (this=0x405d2008, e=0x8a24640,
calling_code=5) at I_Continuation.h:147
#16 0x082fb339 in EThread::execute (this=0x405d2008) at UnixEThread.cc:254
#17 0x082fa29c in spawn_thread_internal (a=0x8a1eb10) at Thread.cc:85
#18 0x00b5f32f in start_thread (arg=<value optimized out>) at pthread_create.c:297
#19 0x00ac520e in clone () from /lib/libc-2.8.so