Same thought. Actually broke the private/work barrier to log into my company's ticketing system and booked the investigation into our infra as actual time spent working. This one is real bad.

The eMail linked (the openwall reflink) details just how many levels of obfuscation were used and how ppl were reporting Valgrind errors and there were attempted fixes for it, too. This stuff's plain insane o.o