Hi tim562,
Your assumption is right with the heap taken from RAM.
We checked MPC5125 linker command file and this issue is going to be fixed soon. You can correct it in the meantime.
Look at twrpxs20 linker command file where kernel data are put in the end of ram, start is not assigned to the specific address.
Regards,
MartinK