crash bounds heap