#0  0x00b05479 in free () from /lib/tls/libc.so.6
(gdb) bt
#0  0x00b05479 in free () from /lib/tls/libc.so.6
#1  0x08058a18 in ast_frfree (fr=0xbc6ff4) at frame.c:281
#2  0xb7441432 in dial_exec_full (chan=0xb75b6048, data=0x81e19e8, peerflags=0xb61327f8) at app_dial.c:645
#3  0xb744432d in dial_exec (chan=0xbc87e4, data=0x0) at app_dial.c:1600
#4  0x080861fd in pbx_exec (c=0xb75b6048, app=0xbc87e4, data=0xb6132b4a, newstack=1) at pbx.c:483
#5  0xb7e12d7c in handle_exec (chan=0xbc87e4, agi=0xbc87e4, argc=3, argv=0xb75b6048) at res_agi.c:1083
#6  0xb7e14ecb in agi_exec_full (chan=0xb75b6048, data=0xb7e1b140, enhanced=0, dead=0) at res_agi.c:1817
#7  0x08091212 in pbx_extension_helper (c=0xb75b6048, con=0x0, context=0xb75b6198 "phones", exten=0xb75b628c "802166925568",
    priority=2, label=0x0, callerid=0xb61380b0 "HuntDial.agi|2|2724|02166925568", action=0) at pbx.c:483
#8  0x08092586 in __ast_pbx_run (c=0xb75b6048) at pbx.c:2182
#9  0x08093fec in pbx_thread (data=0xbc87e4) at pbx.c:2469
#10 0x00ce91d5 in start_thread () from /lib/tls/libpthread.so.0
#11 0x00b692da in clone () from /lib/tls/libc.so.6
(gdb) bt full
#0  0x00b05479 in free () from /lib/tls/libc.so.6
No symbol table info available.
#1  0x08058a18 in ast_frfree (fr=0xbc6ff4) at frame.c:281
No locals.
#2  0xb7441432 in dial_exec_full (chan=0xb75b6048, data=0x81e19e8, peerflags=0xb61327f8) at app_dial.c:645
        tmpchan = '\0' <repeats 100 times>, "\020d[?", '\0' <repeats 51 times>, "\200", '\0' <repeats 99 times>
        stuff = 0xbc87e4 ""
        tech = 0xebcf644 <Address 0xebcf644 out of bounds>
        res = 0
        u = (struct localuser *) 0x821e1b8
        number = 0xbc87e4 ""
        rest = 0x0
        cur = 0x0
        privcid = "P\000\000\000\006'\023?('\023??u\b\bH`[?\000'\023?tS2?\000\210?\000d&?\000\000\000\000\000\210\000\000\000\200Ï#\b\000\210?\000?o?\000\000\210?\000 Ï#\b,'\023??T?\000\000\210?\000 Ï#\b?o?\000\r\000\000\000\016\000\000\000?'\023?ð??\000 Ï#\b Ï#\b\r\000\000\000 Ï#\b\000\000\000\000\r\000\000\000\000\200­? Ï#\b Ï#\b Ï#\b?^?\000?o?\000x'\023????\000????\006\000\000\000?'\023??^?\000\230'\023?$??\000%\000\000\000H\024?\000ä\001\000\000\000ö\037?\000\020\000\000"...
        privintro = " \000\000\000\000\000\000\000H\002\000\000\210\v\034\b\217jÝ??o?\000\000\000\000\000\000\000\000\000\f#\023??T?\000\000\210?\000(\v\034\b?o?\000\030\000\000\000\031\000\000\000Ù#\023?ð??\000(\v\034\b(\v\034\b\030\000\000\000(\v\034\b\000\000\000\000\030\000\000\000\000\200­?(\v\034\b(\v\034\b(\v\034\b(\v\034\b@\v\034\b\214\v\034\b(\v\034\b\214\v\034\b\000\000\000\000!N?", '\0' <repeats 13 times>, "?\002E?\000\000\000\000\000\000\000\000)\000\000\000\000\000\000\000\204\030E?r?D?Zap\000R31\000????\000\000\000\000K\000\000\000 %\023?H`["...
        outgoing = (struct localuser *) 0x81508c8
        tmp = (struct localuser *) 0x81508c8
        to = 49963
        numbusy = 0
        numcongestion = 0
        numnochan = 0
        cause = 0
        numsubst = "93/w02166925568\000\000\210?\000\000\210?\000\000\000\000\000H\210?\000\000\000\000\000i\000\000\000\030ÈU\b\000\000\000\000Zap/93-1", '\0' <repeats 17 times>, "\210?\000\000\210?"
        restofit = '\0' <repeats 32 times>, "\n\000\000\000\000\000\000\000\t", '\0' <repeats 19 times>, "\001\000\000\0008(\023?\030'\023?\214jÝ?\r\000\000"
        cidname = "?o?\000\001\000\000\000\000\210?\000\030\"\023?Fo?\000\000\210?\000\016\000\000\000\000\000\000\000?¡Î\000\016\000\000\000\030ÈU\b?Ý!\by¿Î\000?Ý!\b\210\"\023?\232?d \000\000\000\000\001\000\000\000\000\000\000\000\000\000\000"
        toast = '\0' <repeats 76 times>, "\030\000\000"
        l = 0x81e19e8 "H\210?"
        privdb_val = 0
        calldurationlimit = 0
        config = {features_caller = {flags = 0}, features_callee = {flags = 0}, start_time = {tv_sec = 0, tv_usec = 0},
  feature_timer = 0, timelimit = 11403029, play_warning = -1240258792, warning_freq = -1240259864, warning_sound = 0x0,
  end_sound = 0x0, start_sound = 0x0, firstpass = 0, flags = 0}
        timelimit = 0
        play_warning = 0
        warning_freq = 0
        warning_sound = 0xbc87e4 ""
        end_sound = 0x0
        start_sound = 0x0
        dtmfcalled = 0x0
        dtmfcalling = 0x0
        var = 0xbc87e4 ""
        status = "NOANSWER", '\0' <repeats 140 times>, "Ä'?\000ÔS?\000\000\000\000\000QЭ\000\000\000\000\000?o?\000\000\000\000\000\216jÝ?,'\023?\027ð­\000L'\023?\216jÝ?\001", '\0' <repeats 58 times>
        play_to_caller = 136190440
        play_to_callee = 0
        sentringing = 1
        moh = 0
        outbound_group = 0x0
        macro_result = 0x81e19e8 "H\210?"
        macro_transfer_dest = 0x81e19e8 "H\210?"
        digit = 0
        result = 0
        start_time = 1135056630
        answer_time = 0
        end_time = 0
        app = (struct ast_app *) 0xebcf644
        parse = 0xb61317c0 "Zap"
        args = {argc = 3, argv = 0xb6132034, peers = 0xb61317c0 "Zap", timeout = 0xb61317d4 "60",
  options = 0xb61317d7 "Crg", url = 0x0}
        opts = {flags = 131106}
        opt_args = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}
        __PRETTY_FUNCTION__ = "dial_exec_full"
#3  0xb744432d in dial_exec (chan=0xbc87e4, data=0x0) at app_dial.c:1600
        peerflags = {flags = 32}
#4  0x080861fd in pbx_exec (c=0xb75b6048, app=0xbc87e4, data=0xb6132b4a, newstack=1) at pbx.c:483
        res = 12355556
        saved_c_appl = 0x812ca50 "AGI"
        saved_c_data = 0xb61380b0 "HuntDial.agi|2|2724|02166925568"
        execute = (int (*)(struct ast_channel *, void *)) 0xb7444310 <dial_exec>
        __PRETTY_FUNCTION__ = "pbx_exec"
#5  0xb7e12d7c in handle_exec (chan=0xbc87e4, agi=0xbc87e4, argc=3, argv=0xb75b6048) at res_agi.c:1083
        res = -1218748344
        app = (struct ast_app *) 0x0
        __PRETTY_FUNCTION__ = "handle_exec"
#6  0xb7e14ecb in agi_exec_full (chan=0xb75b6048, data=0xb7e1b140, enhanced=0, dead=0) at res_agi.c:1817
        c = (struct ast_channel *) 0xbc87e4
        ms = -1
        returnstatus = 0
        buf = "EXEC\000Dial\000Zap/93/w02166925568|60|Crg\000\000, Number (02166925568), Using Group (31), Now Using Channel (93), \000\"", '\0' <repeats 210 times>, "d&?\000\000\000\000\000\000\000\000\000?o?\000?,\023??,\023?q9?\000?,\023?V.\023?->\023?\000\000\000\000->\023??o?\000\024:\017\b¡>\023?È-\023?vÝ?\000?,\023?\024:\017\b?>\023?d&?\000"...
        outfd = 486
        f = (struct ast_frame *) 0xb7e1b140
        readf = (FILE *) 0x82d8a70
        retry = 3
        res = -1240255296
        u = (struct localuser *) 0x81ef990
        argv = {0xb61334d0 "HuntDial.agi", 0xb61334dd "2", 0xb61334df "2724", 0xb61334e4 "02166925568",
  0x0 <repeats 104 times>, 0x6c6c6163 <Address 0x6c6c6163 out of bounds>, 0x6c6c612c <Address 0x6c6c612c out of bounds>,
  0x0 <repeats 13 times>, 0xb7e1543e "\201Ãú,", 0x0, 0x0, 0x0, 0x0}
        buf = "HuntDial.agi\0002\0002724\00002166925568", '\0' <repeats 2016 times>
        tmp = 0x0
        argc = 4
        fds = {486, 506}
        efd = -1
        pid = 16608
        agi = {fd = 506, audio = -1, ctrl = 486}
        __PRETTY_FUNCTION__ = "agi_exec_full"
#7  0x08091212 in pbx_extension_helper (c=0xb75b6048, con=0x0, context=0xb75b6198 "phones", exten=0xb75b628c "802166925568",
    priority=2, label=0x0, callerid=0xb61380b0 "HuntDial.agi|2|2724|02166925568", action=0) at pbx.c:483
        e = (struct ast_exten *) 0xb7b8bb60
        sw = (struct ast_switch *) 0x0
        data = 0x0
        foundcontext = 0xb7bbc277 "huntgroups"
        newstack = 1
        res = 0
        status = 5
        incstack = {0xb7bbbe50 "phones", 0xb7bbc668 "vservices", 0xb7bbf098 "phonesextens", 0xb7b8b700 "hotextens",
  0xb02664 "\201Ã\220I\f", 0x0, 0x0, 0xbc6ff4 "<m?",
  0xb613a120 "\001\200­?`?\023?`?\023?`?\023?`?\023?r?\023???\023?`?\023???\023?", 0xb613a0fc "\f?\023?vÝ?",
  0xb03971 "\211~\020\213U\024\211~\f\211~\004\205Òt6\213U\024\213}ö\211V\024\211V\b1Ò\211~\030\211\226\230",
  0xb613a120 "\001\200­?`?\023?`?\023?`?\023?`?\023?r?\023???\023?`?\023???\023?", 0xb613a260 "\"Technical\" <2724>",
  0xb613a2af "", 0x0, 0xb613a2af "", 0xbc6ff4 "<m?", 0x80f93be "\"%s\" <%s>", 0xb613a23c "", 0xb613a20c "(?\023?Òf?",
  0xafe176 "\213\215\f???\211Â9\2150???t\t\213?(???Æ\006",
  0xb613a120 "\001\200­?`?\023?`?\023?`?\023?`?\023?r?\023???\023?`?\023???\023?", 0x80f93be "\"%s\" <%s>", 0xb613a244 "",
  0xb613a260 "\"Technical\" <2724>", 0x0, 0xb613a1c0 "",
  0xb613a120 "\001\200­?`?\023?`?\023?`?\023?`?\023?r?\023???\023?`?\023???\023?",
  0xfbad8001 <Address 0xfbad8001 out of bounds>, 0xb613a260 "\"Technical\" <2724>", 0xb613a260 "\"Technical\" <2724>",
  0xb613a260 "\"Technical\" <2724>", 0xb613a260 "\"Technical\" <2724>", 0xb613a272 "", 0xb613a2af "",
  0xb613a260 "\"Technical\" <2724>", 0xb613a2af "", 0x0 <repeats 14 times>, 0xffffffff <Address 0xffffffff out of bounds>,
  0x0 <repeats 13 times>, 0xbc6a20 "", 0x0, 0x0, 0x0, 0xb04a31 "\201ÃÃ%\f", 0x0, 0x88 "", 0x18 "", 0xbc8848 "", 0x0,
  0xbc8834 "", 0xbc8838 "", 0xbc8800 "", 0xbc6ff4 "<m?", 0x0, 0xfffffff0 <Address 0xfffffff0 out of bounds>, 0xb613a28c "",
  0xb0575d "\215v", 0x0, 0xbc6ff4 "<m?", 0x50 "", 0x80f93be "\"%s\" <%s>", 0xb613a228 "\b6!\b\234_\n\b`?\023?P",
  0xae66d2 "\203Ä\020[]Ã\220\220\220\220\220\220\220\220U\211ã\215M\020S\203ñ\f\213U\f\211L$\b\213E\bæx%??\201Ã?\b\016",
  0xb613a260 "\"Technical\" <2724>", 0x50 "", 0x80f93be "\"%s\" <%s>", 0xb613a23c "", 0xb75b6048 "SIP/2724-edd4",
  0x8213608 "\"Technical\" <2724>", 0x80a5f9c "ìo???\211D$\024??\006\020\b?Ñ\v\020\b\211T$\020¿^\002",
  0xb613a260 "\"Technical\" <2724>", 0x50 "", 0x80f93be "\"%s\" <%s>", 0xb7550f00 "Technical", 0xb7550ef0 "2724", 0x0, 0x0,
  0x0, 0x0, 0x0, 0x0, 0xb7550ef0 "2724", 0x72614b22 <Address 0x72614b22 out of bounds>,
  0x697a6f67 <Address 0x697a6f67 out of bounds>, 0x2022696e <Address 0x2022696e out of bounds>,
  0x3237323c <Address 0x3237323c out of bounds>, 0x3e34 <Address 0x3e34 out of bounds>, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0,
  0x0, 0x0, 0xb1e616 "\211Ó=\001ö??s\001ÃæI6\b", 0x80a52fa "\213L$\030\213t$\034\211\213\200\002", 0xb613a2b8 "?\226?C\002",
  0x0, 0x0, 0x0}
        passdata = "HuntDial.agi|2|2724|02166925568", '\0' <repeats 8160 times>
        stacklen = 4
        tmp = '\0' <repeats 79 times>
        tmp2 = '\0' <repeats 79 times>
        tmp3 = '\0' <repeats 6880 times>, "4", '\0' <repeats 1310 times>
        atmp = '\0' <repeats 79 times>
        atmp2 = '\0' <repeats 5300 times>, "Ä'?\000ÔS?\000\000\000\000\000QЭ\000\000\000\000\000?o?\000\000\000\000\000Ä'?\000ÔS?\000\027ð­\000QЭ\000\000\000\000\000?o?\000\000\000\000\000\203???hZ\023?\027ð­\000\214Z\023?\203???\005", '\0' <repeats 19 times>, "Ê???", '\0' <repeats 24 times>, "t­??\025?­\0008Z\023?\bV\023?", '\0' <repeats 16 times>, "\025?­\000TZ\023?$V\023?", '\0' <repeats 88 times>, "S\026?\000\000????~\023?*", '\0' <repeats 11 times>, "\204<­?ÔS?", '\0' <repeats 13 times>, "?"...
        __PRETTY_FUNCTION__ = "pbx_extension_helper"
#8  0x08092586 in __ast_pbx_run (c=0xb75b6048) at pbx.c:2182
        digit = 0
        exten = '\0' <repeats 255 times>
        pos = 0
        waittime = 2
        res = 0
        __PRETTY_FUNCTION__ = "__ast_pbx_run"
#9  0x08093fec in pbx_thread (data=0xbc87e4) at pbx.c:2469
No locals.
#10 0x00ce91d5 in start_thread () from /lib/tls/libpthread.so.0
No symbol table info available.
#11 0x00b692da in clone () from /lib/tls/libc.so.6
No symbol table info available.
(gdb)