I've committed[0] a change for suffix freelist management for CAS that would reliably crash 1.2.5. The test I crashed it with looks like this (piped into netcat):
#!/usr/bin/env python import sys for i in range(100000): sys.stdout.write("set k%s 0 0 5 noreply\r\nhello\r\n" % i) sys.stdout.write("gets") for i in range(100000): sys.stdout.write(" k%d" % i) sys.stdout.write("\r\n") [0] http://github.com/dustin/memcached/commit/6ec16c4 -- Dustin Sallings