This glibc bug is reported and detailed here (with a test case): http://sourceware.org/bugzilla/show_bug.cgi?id=3352 This occurs to openoffice, according to bug #130837.
Created attachment 101989 [details, diff] fix-realloc.patch Latest changes.
added to glibc-2.5 patchset for next rev bump