fixed tracking mapped shm segments

The pointer to the mapped segment is modified before being tracked. As a result, the wrong address is being unmapped in ketama_smoke.

On systems with low shm-related limits, this causes ketama_roll to fail after a few calls (too many mapped segments, too many mapped pages, etc)