(gdb) bt #0 0x08062e81 in ast_channel_spy_remove (chan=0x81a8750, spy=0xb70eb7f8) at channel.c:1044 #1 0xb74ca84e in stop_spying (chan=0x81a8750, spy=0xb70eb7f8) at app_chanspy.c:220 #2 0xb74cad4a in channel_spy (chan=0x81bc4d0, spyee=0x81a8750, volfactor=0xb70ebb98, fd=0) at app_chanspy.c:340 #3 0xb74cb9fb in chanspy_exec (chan=0x81bc4d0, data=0xb70f0048) at app_chanspy.c:516 #4 0x0808bb49 in pbx_exec (c=0x81bc4d0, app=0x8196330, data=0xb70f0048, newstack=1) at pbx.c:544 #5 0x0808fb2e in pbx_extension_helper (c=0x81bc4d0, con=0x0, context=0x81bc620 "default", exten=0x81bc714 "3", priority=1, label=0x0, callerid=0x819bf88 "Test3", action=1) at pbx.c:1687 #6 0x08091061 in ast_spawn_extension (c=0x81bc4d0, context=0x81bc620 "default", exten=0x81bc714 "3", priority=1, callerid=0x819bf88 "Test3") at pbx.c:2220 #7 0x0809157b in __ast_pbx_run (c=0x81bc4d0) at pbx.c:2286 #8 0x080925b6 in pbx_thread (data=0x81bc4d0) at pbx.c:2507 #9 0xb7fc3361 in start_thread () from /lib/tls/i686/cmov/libpthread.so.0 #10 0xb7eb1bde in clone () from /lib/tls/i686/cmov/libc.so.6 (gdb) bt full #0 0x08062e81 in ast_channel_spy_remove (chan=0x81a8750, spy=0xb70eb7f8) at channel.c:1044 curelm = (struct ast_channel_spy *) 0x0 f = (struct ast_frame *) 0xb70eb764 __PRETTY_FUNCTION__ = "ast_channel_spy_remove" #1 0xb74ca84e in stop_spying (chan=0x81a8750, spy=0xb70eb7f8) at app_chanspy.c:220 No locals. #2 0xb74cad4a in channel_spy (chan=0x81bc4d0, spyee=0x81a8750, volfactor=0xb70ebb98, fd=0) at app_chanspy.c:340 csth = {spy = {list = {next = 0x0}, lock = {__m_reserved = 0, __m_count = 0, __m_owner = 0x0, __m_kind = 1, __m_lock = {__status = 0, __spinlock = 0}}, trigger = {__c_lock = {__status = 0, __spinlock = 0}, __c_waiting = 0x0, __padding = '\0' , __align = 0}, read_queue = {head = 0x0, samples = 0, format = 64}, write_queue = {head = 0x0, samples = 0, format = 64}, flags = 57, status = CHANSPY_RUNNING, type = 0xb74cbe9e "ChanSpy", read_vol_adjustment = 0, write_vol_adjustment = 0}, fd = 0, volfactor = 0} running = 1 res = 1 x = 0 inp = '\0' name = 0xb70eb780 "SIP/Test1-d949" f = (struct ast_frame *) 0x0 #3 0xb74cb9fb in chanspy_exec (chan=0x81bc4d0, data=0xb70f0048) at app_chanspy.c:516 x = 7 group = 0x0 igrp = 1 u = (struct localuser *) 0x8164fa8 peer = (struct ast_channel *) 0x81a8750 prev = (struct ast_channel *) 0x81a8750 name = '\0' peer_name = "spy-sip\000Test1-d949", '\0' args = 0xb70eb8d0 "SIP/Test1" ptr = 0xb70ebbbb "Test1-d949" options = 0xb70eb8da "b" spec = 0xb70eb8d0 "SIP/Test1" argv = {0xb70eb8d0 "SIP/Test1", 0xb70eb8da "b", 0x0, 0x0, 0x0} ---Type to continue, or q to quit--- mygroup = 0x0 recbase = 0x0 res = 0 volfactor = 0 silent = 0 argc = 2 bronly = 2 chosen = 0 count = 1 waitms = 100 num = 0 oldrf = 4 oldwf = 4 fd = 0 flags = {flags = 2} zero_volume = 0 '\0' __PRETTY_FUNCTION__ = "chanspy_exec" #4 0x0808bb49 in pbx_exec (c=0x81bc4d0, app=0x8196330, data=0xb70f0048, newstack=1) at pbx.c:544 res = 134790235 saved_c_appl = 0x0 saved_c_data = 0x0 execute = (int (*)(struct ast_channel *, void *)) 0xb74cadf0 __PRETTY_FUNCTION__ = "pbx_exec" #5 0x0808fb2e in pbx_extension_helper (c=0x81bc4d0, con=0x0, context=0x81bc620 "default", exten=0x81bc714 "3", priority=1, label=0x0, callerid=0x819bf88 "Test3", action=1) at pbx.c:1687 e = (struct ast_exten *) 0x819d990 app = (struct ast_app *) 0x8196330 sw = (struct ast_switch *) 0x0 data = 0x0 foundcontext = 0x81bc620 "default" newstack = 1 res = 0 status = 5 incstack = {0x0 , 0xb7e491a4 "\201�\237\f", 0x0, 0x0, ---Type to continue, or q to quit--- 0xb7f130dc "<\236\022", 0xb70f20f0 "\001\200L\"\017L\"\017L\"\017L\"\017[\"\017\233\"\017L\"\017\233\"\017", 0xb70f20cc "�\017H� \017�020\b\024\"\017L\"\017", 0xb7e4a4a1 "\211~\020\213U\024\211~\f\211~\004\205�6\213U\024\213}�211V\024\211V\b1�211~\030\211\226\230", 0xb70f20f0 "\001\200L\"\017L\"\017L\"\017L\"\017[\"\017\233\"\017L\"\017\233\"\017", 0xb70f224c " �033\b", 0xb70f229b "\b\001", 0x0, 0xb70f229b "\b\001", 0xb7f130dc "<\236\022", 0x810d6a5 "\"%s\" <%s>", 0xb70f220c "`z\025\b\210\031\b", 0xb70f21dc "!\017B�L\"\017P", 0xb7e448a6 "\213\215\f\211�\2150t\t\213(�006", 0xb70f20f0 "\001\200L\"\017L\"\017L\"\017L\"\017[\"\017\233\"\017L\"\017\233\"\017", 0x810d6a5 "\"%s\" <%s>", 0xb70f2214 "", 0xb70f224c " �033\b", 0x0, 0xb70f2190 "", 0xb70f20f0 "\001\200L\"\017L\"\017L\"\017L\"\017[\"\017\233\"\017L\"\017\233\"\017", 0xfbad8001
, 0xb70f224c " �033\b", 0xb70f224c " �033\b", 0xb70f224c " �033\b", 0xb70f224c " �033\b", 0xb70f225b "\b0c\031\b\001", 0xb70f229b "\b\001", 0xb70f224c " �033\b", 0xb70f229b "\b\001", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7000000
, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff
, 0xb7f064dd "corrupted double-linked list", 0xb7f064dd "corrupted double-linked list", 0xb7f064dd "corrupted double-linked list", 0x0, 0x0, 0x0, 0x0, 0x0, 0x68
, 0x18
, 0xb7f14938 "", 0x0, 0xb7f14924 "", 0xb7f12b20 "", 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7f130dc "<\236\022", 0xb7f14900 "", 0x0, 0xb70f226c "H", 0xb7e4c5d3 "�\213\215\\9A\004�022\213\225\\\213r\b9F\004\211\\w�213\205\\\213p\f�222\201}�\001", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81cbaf0 "4", 0xb7e4c334 "\201èm\f", 0xb7f130dc "<\236\022", 0x0, 0xb70f2bb0 "+\017�033\b+\017\001", 0xb70f21f8 "�\017G\n\b�033\b\200�033\b\024", 0xb7e2c742 "\203�020[]�220\220\220\220\220\220\220\220U\211�215M\020S\203�f\213U\f\211L$\b\213E\b�206\025\201�i\016", 0xb70f224c " �033\b", 0x50
, 0x810d6a5 "\"%s\" <%s>", 0xb70f220c "`z\025\b\210\031\b", 0xb7fcd414 "�", 0xb70f24c8 "", 0x80af947 "\213\204$", 0x81bcba4 "", 0x81bc880 "", 0x14
, 0x8157a60 "Test3", 0x819bf88 "Test3", 0x0, 0x0, 0x0, 0x810d5d9 "", 0x819bf88 "Test3", 0x819bf88 "Test3", 0xb70f24c8 "", 0xb70f2280 "�\033\b", 0x0, 0xb7e66196 "\211�\001�s\001�N\b", 0x80d3fa8 "\213D$\020\213T$\024\211\003\211S\004\211�203�030[�004", 0xb70f2250 "", 0x0} passdata = "SIP/Test1|b", '\0' ---Type to continue, or q to quit--- stacklen = 0 tmp = "\033[1;36;40mChanSpy\033[0;37;40m", '\0' tmp2 = "\033[1;35;40mSIP/Test3-c02c\033[0;37;40m", '\0' tmp3 = "\033[1;35;40mSIP/Test1|b\033[0;37;40m", '\0' atmp = '\0' atmp2 = '\0' __PRETTY_FUNCTION__ = "pbx_extension_helper" #6 0x08091061 in ast_spawn_extension (c=0x81bc4d0, context=0x81bc620 "default", exten=0x81bc714 "3", priority=1, callerid=0x819bf88 "Test3") at pbx.c:2220 No locals. #7 0x0809157b in __ast_pbx_run (c=0x81bc4d0) at pbx.c:2286 firstpass = 1 digit = 0 exten = '\0' pos = 0 waittime = 0 res = 0 autoloopflag = 0 __PRETTY_FUNCTION__ = "__ast_pbx_run" #8 0x080925b6 in pbx_thread (data=0x81bc4d0) at pbx.c:2507 c = (struct ast_channel *) 0x81bc4d0 #9 0xb7fc3361 in start_thread () from /lib/tls/i686/cmov/libpthread.so.0 No symbol table info available. #10 0xb7eb1bde in clone () from /lib/tls/i686/cmov/libc.so.6 No symbol table info available. Just in case I repeated the process and generated the backtrace again, hope it helps: (gdb) bt #0 0x08062e81 in ast_channel_spy_remove (chan=0x81ae5d0, spy=0xb70b97f8) at channel.c:1044 #1 0xb747584e in stop_spying (chan=0x81ae5d0, spy=0xb70b97f8) at app_chanspy.c:220 #2 0xb7475d4a in channel_spy (chan=0x81bbca0, spyee=0x81ae5d0, volfactor=0xb70b9b98, fd=0) at app_chanspy.c:340 #3 0xb74769fb in chanspy_exec (chan=0x81bbca0, data=0xb70be048) at app_chanspy.c:516 #4 0x0808bb49 in pbx_exec (c=0x81bbca0, app=0x8196328, data=0xb70be048, newstack=1) at pbx.c:544 #5 0x0808fb2e in pbx_extension_helper (c=0x81bbca0, con=0x0, context=0x81bbdf0 "default", exten=0x81bbee4 "3", priority=1, label=0x0, callerid=0x8159df8 "Test3", action=1) at pbx.c:1687 #6 0x08091061 in ast_spawn_extension (c=0x81bbca0, context=0x81bbdf0 "default", exten=0x81bbee4 "3", priority=1, callerid=0x8159df8 "Test3") at pbx.c:2220 #7 0x0809157b in __ast_pbx_run (c=0x81bbca0) at pbx.c:2286 #8 0x080925b6 in pbx_thread (data=0x81bbca0) at pbx.c:2507 #9 0xb7f6e361 in start_thread () from /lib/tls/i686/cmov/libpthread.so.0 #10 0xb7e5cbde in clone () from /lib/tls/i686/cmov/libc.so.6 (gdb) bt full #0 0x08062e81 in ast_channel_spy_remove (chan=0x81ae5d0, spy=0xb70b97f8) at channel.c:1044 curelm = (struct ast_channel_spy *) 0x0 f = (struct ast_frame *) 0xb70b9764 __PRETTY_FUNCTION__ = "ast_channel_spy_remove" #1 0xb747584e in stop_spying (chan=0x81ae5d0, spy=0xb70b97f8) at app_chanspy.c:220 No locals. #2 0xb7475d4a in channel_spy (chan=0x81bbca0, spyee=0x81ae5d0, volfactor=0xb70b9b98, fd=0) at app_chanspy.c:340 csth = {spy = {list = {next = 0xb70b97f8}, lock = {__m_reserved = 0, __m_count = 0, __m_owner = 0x0, __m_kind = 1, __m_lock = {__status = 0, __spinlock = 0}}, trigger = { __c_lock = {__status = 0, __spinlock = 0}, __c_waiting = 0x0, __padding = '\0' , __align = 0}, read_queue = {head = 0x0, samples = 0, format = 64}, write_queue = {head = 0x0, samples = 0, format = 64}, flags = 57, status = CHANSPY_RUNNING, type = 0xb7476e9e "ChanSpy", read_vol_adjustment = 0, write_vol_adjustment = 0}, fd = 0, volfactor = 0} running = 1 res = 1 x = 0 inp = '\0' name = 0xb70b9780 "SIP/Test1-be55" f = (struct ast_frame *) 0x0 #3 0xb74769fb in chanspy_exec (chan=0x81bbca0, data=0xb70be048) at app_chanspy.c:516 x = 7 group = 0x0 igrp = 1 u = (struct localuser *) 0x819c980 peer = (struct ast_channel *) 0x81ae5d0 prev = (struct ast_channel *) 0x81ae5d0 name = '\0' peer_name = "spy-sip\000Test1-be55", '\0' args = 0xb70b98d0 "SIP/Test1" ptr = 0xb70b9bbb "Test1-be55" options = 0xb70b98da "b" spec = 0xb70b98d0 "SIP/Test1" ---Type to continue, or q to quit--- argv = {0xb70b98d0 "SIP/Test1", 0xb70b98da "b", 0x0, 0x0, 0x0} mygroup = 0x0 recbase = 0x0 res = 0 volfactor = 0 silent = 0 argc = 2 bronly = 2 chosen = 0 count = 1 waitms = 100 num = 0 oldrf = 4 oldwf = 4 fd = 0 flags = {flags = 2} zero_volume = 0 '\0' __PRETTY_FUNCTION__ = "chanspy_exec" #4 0x0808bb49 in pbx_exec (c=0x81bbca0, app=0x8196328, data=0xb70be048, newstack=1) at pbx.c:544 res = 134790235 saved_c_appl = 0x0 saved_c_data = 0x0 execute = (int (*)(struct ast_channel *, void *)) 0xb7475df0 __PRETTY_FUNCTION__ = "pbx_exec" #5 0x0808fb2e in pbx_extension_helper (c=0x81bbca0, con=0x0, context=0x81bbdf0 "default", exten=0x81bbee4 "3", priority=1, label=0x0, callerid=0x8159df8 "Test3", action=1) at pbx.c:1687 e = (struct ast_exten *) 0x819da10 app = (struct ast_app *) 0x8196328 sw = (struct ast_switch *) 0x0 data = 0x0 foundcontext = 0x81bbdf0 "default" newstack = 1 res = 0 status = 5 ---Type to continue, or q to quit--- incstack = {0x0, 0xb7ebe0dc "<\236\022", 0xb
, 0xd
, 0xb70c00e8 "\220\001\f�, 0xb7ebe0dc "<\236\022", 0x811fdf8 "\030", 0xb70c00c8 "\f\002\f�001\f޷�, 0xb70c00f8 "L\002\fL\002\fL\002\f[\002\f\233\002\fL\002\f\233\002\f", 0xb7e94f96 "\211E\230\213Eк\001", 0x3
, 0x0, 0x811fdfc "\002", 0xb70c00c8 "\f\002\f�001\f޷�, 0x80925c6 "\203�\203|$P", 0xb70ca468 "�004", 0x80925c6 "\203�\203|$P", 0xb7f7689e "R", 0xb7df41a4 "\201�\237\f", 0xb7f76890 "�n", 0xb7f7690c "\030", 0xb7ebe0dc "<\236\022", 0xb70c00f0 "\001\200L\002\fL\002\fL\002\fL\002\f[\002\f\233\002\fL\002\f\233\002\f", 0xb70c00cc "�001\f޷�, 0xb7df54a1 "\211~\020\213U\024\211~\f\211~\004\205�6\213U\024\213}�211V\024\211V\b1�211~\030\211\226\230", 0xb70c00f0 "\001\200L\002\fL\002\fL\002\fL\002\f[\002\f\233\002\fL\002\f\233\002\f", 0xb70c024c "�033\b", 0xb70c029b "\b\001", 0x0, 0xb70c029b "\b\001", 0xb7ebe0dc "<\236\022", 0x810d6a5 "\"%s\" <%s>", 0xb70c020c "\020�034\b\235\025\b\200\004\f", 0xb70c01dc "\001\fBwݷL\002\fP", 0xb7def8a6 "\213\215\f\211�\2150t\t\213(�006", 0xb70c00f0 "\001\200L\002\fL\002\fL\002\fL\002\f[\002\f\233\002\fL\002\f\233\002\f", 0x810d6a5 "\"%s\" <%s>", 0xb70c0214 "\200\004\f", 0xb70c024c "�033\b", 0x0, 0xb70c0190 "�뷴\001\f�۷��, 0xb70c00f0 "\001\200L\002\fL\002\fL\002\fL\002\f[\002\f\233\002\fL\002\f\233\002\f", 0xfbad8001
, 0xb70c024c "�033\b", 0xb70c024c "�033\b", 0xb70c024c "�033\b", 0xb70c024c "�033\b", 0xb70c025b "\b(c\031\b\001", 0xb70c029b "\b\001", 0xb70c024c "�033\b", 0xb70c029b "\b\001", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1
, 0xb7000000
, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff
, 0xb7eb14dd "corrupted double-linked list", 0xb7eb14dd "corrupted double-linked list", 0xb7eb14dd "corrupted double-linked list", 0x0, 0x0, 0x0, 0xb7ebe0dc "<\236\022", 0x80925c6 "\203�\203|$P", 0x10
, 0x18
, 0xb7ebf938 "", 0x0, 0xb7ebf924 "", 0xb7ebdb20 "", 0x0, 0xfffff194
, 0xb7ebe0dc "<\236\022", 0xb70c01b4 "�001\f\0050�200\004\f\001", 0xb7dbc7e9 "\215&", 0xb7ebe0dc "<\236\022", 0xb7ebf900 "", 0x0, 0xb70c026c "H�v�033\b", 0xb7df75d3 "�\213\215\\9A\004�022\213\225\\\213r\b9F\004\211\\w�213\205\\\213p\f�222\201}�\001", 0x1
, 0xb70c01e0 "BwݷL\002\fP", 0xb7f73005 "\213E \213U\034\213H \211\024$\211M�\227$", 0xb70c0480 "\024\204�v\f", ---Type to continue, or q to quit--- 0x1
, 0xb7f6f0b0 "U\211�213E\be\001", 0x818f2a0 " \232\031", 0xb7df7334 "\201èm\f", 0xb7ebe0dc "<\236\022", 0x0, 0xb70c0bb0 "\v\f�032\b\v\f\001", 0xb70c01f8 "�004\fG\n\b,\033\bP�033\b\024", 0xb7dd7742 "\203�020[]�220\220\220\220\220\220\220\220U\211�215M\020S\203�f\213U\f\211L$\b\213E\b�206\025\201�i\016", 0xb70c024c "�033\b", 0x50
, 0x810d6a5 "\"%s\" <%s>", 0xb70c020c "\020�034\b\235\025\b\200\004\f", 0xb7f78414 "�", 0xb70c04c8 "", 0x80af947 "\213\204$", 0x81bba2c "", 0x81bc050 "", 0x14
, 0x81cd910 "Test3", 0x8159df8 "Test3", 0xb70c0480 "\024\204�v\f", 0x0, 0x0, 0x810d5d9 "", 0x8159df8 "Test3", 0x8159df8 "Test3", 0xb70c04c8 "", 0xb70c0280 "\033\b", 0x0, 0xb7e11196 "\211�\001�s\001�N\b", 0x80d3fa8 "\213D$\020\213T$\024\211\003\211S\004\211�203�030[�004", 0xb70c0250 "", 0x0} passdata = "SIP/Test1|b", '\0' stacklen = 0 tmp = "\033[1;36;40mChanSpy\033[0;37;40m", '\0' tmp2 = "\033[1;35;40mSIP/Test3-9df7\033[0;37;40m", '\0' tmp3 = "\033[1;35;40mSIP/Test1|b\033[0;37;40m", '\0' , "\004C߷\224f޷\000\000\000\000\201�\000\000\000\000��000\000\000\000U�020\b�v\207 �vU�020\b", '\0' , "�000ݷ�\v�v", '\0' , "d \000\000\000\000\001", '\0' , "\n\000\000\000\021", '\0' , "&\000\000\000\001\000\000\000<�v�\vS�020\b\002\000\000\000", '\0' , "U�020\b", '\0' ... atmp = '\0' atmp2 = '\0' __PRETTY_FUNCTION__ = "pbx_extension_helper" #6 0x08091061 in ast_spawn_extension (c=0x81bbca0, context=0x81bbdf0 "default", exten=0x81bbee4 "3", priority=1, callerid=0x8159df8 "Test3") at pbx.c:2220 No locals. #7 0x0809157b in __ast_pbx_run (c=0x81bbca0) at pbx.c:2286 firstpass = 1 digit = 0 exten = '\0' pos = 0 waittime = -1208537232 res = 0 ---Type to continue, or q to quit--- autoloopflag = 0 __PRETTY_FUNCTION__ = "__ast_pbx_run" #8 0x080925b6 in pbx_thread (data=0x81bbca0) at pbx.c:2507 c = (struct ast_channel *) 0x81bbca0 #9 0xb7f6e361 in start_thread () from /lib/tls/i686/cmov/libpthread.so.0 No symbol table info available. #10 0xb7e5cbde in clone () from /lib/tls/i686/cmov/libc.so.6 No symbol table info available. (gdb)