-----------------
zapata.conf
-----------------
[channels]
musiconhold=default
context=avaya_pri_incoming
switchtype=Euroisdn
usercallid=yes
echocancel=yes
echocancelwhenbridged=yes
rxgain=0.0
txgain=0.0

signalling = pri_cpe
group=1
channel=1-15,17-29



-------------------
zaptel.conf
-------------------
#
# Zaptel Configuration File
#
loadzone=es
#span definitions
span = 1,1,0,ccs,hdb3,crc4,yellow 
 
bchan = 1-15,17-30
dchan = 16

---------------------
----  crash 1  ------
---------------------

(gdb) bt
#0  ast_var_name (var=0x9a200040) at chanvars.c:71
#1  0x0809f2cf in ast_cdr_getvar (cdr=0x9a200040, name=0xb2ffcb8c "disposition", ret=0xb2ffcba0,
    workspace=0xb2ffcc2c "", workspacelen=4096, recur=0) at cdr.c:196
#2  0x405383db in builtin_function_cdr_read (chan=0x0, cmd=0xb2ffcbdc "CDR", data=0xb2ffcb8c "disposition", buf=0x0,
    len=0) at func_cdr.c:69
#3  0x08085029 in ast_func_read (chan=0x0, in=0xb2ffcbe0 "disposition", workspace=0x0, len=0) at pbx.c:1377
#4  0x08085505 in pbx_substitute_variables_helper_full (c=0xb2ffecb4, headp=0xb2fff07c,
    cp1=0x40961900 "\"${CDR(clid)}\",\"${CDR(src)}\",\"${CDR(dst)}\",\"${CDR(dcontext)}\",\"${CDR(channel)}\",\"${CDR(dstchannel)}\",\"${CDR(lastapp)}\",\"${CDR(lastdata)}\",\"${CDR(start)}\",\"${CDR(answer)}\",\"${CDR(end)}\",\"${CDR(duration"..., cp2=0xb2fff14f "", count=1908) at pbx.c:1520
#5  0x08085918 in pbx_substitute_variables_helper (c=0x9a200040, cp1=0x0, cp2=0x0, count=0) at pbx.c:1600
#6  0x4096033b in custom_log (cdr=0x0) at cdr_custom.c:120
#7  0x080a1666 in post_cdr (cdr=0x82852d0) at cdr.c:824
#8  0x080a0ce8 in ast_cdr_detach (cdr=0x82852d0) at cdr.c:1013
#9  0x08060917 in ast_hangup (chan=0x830f350) at channel.c:1362
#10 0x0808f3df in __ast_pbx_run (c=0x830f350) at pbx.c:2467
#11 0x0808fe1f in pbx_thread (data=0x0) at pbx.c:2517
#12 0x40024e51 in pthread_start_thread () from /lib/libpthread.so.0
#13 0x401ec8aa in clone () from /lib/libc.so.6

(gdb) bt full
#0  ast_var_name (var=0x9a200040) at chanvars.c:71
        name = 0x8102c7a "serfield"
#1  0x0809f2cf in ast_cdr_getvar (cdr=0x9a200040, name=0xb2ffcb8c "disposition", ret=0xb2ffcba0,
    workspace=0xb2ffcc2c "", workspacelen=4096, recur=0) at cdr.c:196
        tm = {tm_sec = 0, tm_min = 0, tm_hour = 0, tm_mday = 1162234560, tm_mon = 2, tm_year = 0,
  tm_wday = -1291859036, tm_yday = 134860445, tm_isdst = -1291859036, tm_gmtoff = 0,
  tm_zone = 0x8 <Address 0x8 out of bounds>}
        t = 0
#2  0x405383db in builtin_function_cdr_read (chan=0x0, cmd=0xb2ffcbdc "CDR", data=0xb2ffcb8c "disposition", buf=0x0,
    len=0) at func_cdr.c:69
        ret = 0x0
        argc = 0
        argv = {0xb2ffcb8c "disposition", 0x0}
        recursive = 0
        cdr = (struct ast_cdr *) 0x82852d0
#3  0x08085029 in ast_func_read (chan=0x0, in=0xb2ffcbe0 "disposition", workspace=0x0, len=0) at pbx.c:1377
        args = 0xb2ffcbe0 "disposition"
        function = 0xb2ffecb4 ""
        acfptr = (struct ast_custom_function *) 0x9a200040
#4  0x08085505 in pbx_substitute_variables_helper_full (c=0xb2ffecb4, headp=0xb2fff07c,
    cp1=0x40961900 "\"${CDR(clid)}\",\"${CDR(src)}\",\"${CDR(dst)}\",\"${CDR(dcontext)}\",\"${CDR(channel)}\",\"${CDR(dst
channel)}\",\"${CDR(lastapp)}\",\"${CDR(lastdata)}\",\"${CDR(start)}\",\"${CDR(answer)}\",\"${CDR(end)}\",\"${CDR(duratio
n"..., cp2=0xb2fff14f "", count=1908) at pbx.c:1520
        cp4 = 0xb2ffcc2c ""
        whereweare = 0x409619f2 "\",\"${CDR(amaflags)}\",\"${CDR(accountcode)}\",\"${CDR(uniqueid)}\",\"${CDR(userfield)}
\"\n"
        length = -1291850572
        offset = 0
        offset2 = -2147483648
        isfunction = 1
        workspace = 0xb2ffcc2c ""
        ltmp = 0x0
        var = 0xb2ffdc2c "CDR(disposition)"
        nextvar = 0x80fe240 "pbx_substitute_variables_helper_full"
        nextexp = 0x0
        vars = 0x80f9c71 "pbx.c"
        vare = 0xb2ffecb4 ""
        pos = -1291850572
        brackets = -1709178816
        needsub = 0
#5  0x08085918 in pbx_substitute_variables_helper (c=0x9a200040, cp1=0x0, cp2=0x0, count=0) at pbx.c:1600
No locals.
#6  0x4096033b in custom_log (cdr=0x0) at cdr_custom.c:120
        buf = "\"071124\",\"071124\",\"2008\",\"presence\",\"Local/2008@presence-0e51,2\",\"\",\"Wait\",\"60000\",\"2006-10-30 19:56:00\",\"\",\"2006-10-30 19:56:00\",\"0\",\"0\",\"", '\0' <repeats 1908 times>
        dummy = {name = '\0' <repeats 79 times>, tech = 0x0, tech_pvt = 0x0, language = '\0' <repeats 19 times>,
  type = 0x0, fds = {0, 0, 0, 0, 0, 0, 0, 0}, musicclass = '\0' <repeats 19 times>, music_state = 0x0,
  generatordata = 0x0, generator = 0x0, _bridge = 0x0, masq = 0x0, masqr = 0x0, cdrflags = 0, _softhangup = 0,
  whentohangup = 0, blocker = 0, lock = {__m_reserved = 0, __m_count = 0, __m_owner = 0x0, __m_kind = 0, __m_lock = {
      __status = 0, __spinlock = 0}}, blockproc = 0x0, appl = 0x0, data = 0x0, fdno = 0, sched = 0x0, streamid = 0,
  stream = 0x0, vstreamid = 0, vstream = 0x0, oldwriteformat = 0, timingfd = 0, timingfunc = 0, timingdata = 0x0,
  _state = 0, rings = 0, nativeformats = 0, readformat = 0, writeformat = 0, cid = {cid_dnid = 0x0, cid_num = 0x0,
    cid_name = 0x0, cid_ani = 0x0, cid_rdnis = 0x0, cid_pres = 0, cid_ani2 = 0, cid_ton = 0, cid_tns = 0},
  context = '\0' <repeats 79 times>, macrocontext = '\0' <repeats 79 times>, macroexten = '\0' <repeats 79 times>,
  macropriority = 0, exten = '\0' <repeats 79 times>, priority = 0, dtmfq = '\0' <repeats 79 times>, dtmff = {
    frametype = 0, subclass = 0, datalen = 0, samples = 0, mallocd = 0, offset = 0, src = 0x0, data = 0x0, delivery = {
      tv_sec = 0, tv_usec = 0}, prev = 0x0, next = 0x0}, pbx = 0x0, amaflags = 0,
  accountcode = '\0' <repeats 19 times>, cdr = 0x82852d0, adsicpe = 0, call_forward = '\0' <repeats 79 times>,
  zone = 0x0, monitor = 0x0, insmpl = 0, outsmpl = 0, fin = 0, fout = 0, uniqueid = '\0' <repeats 31 times>,
  hangupcause = 0, varshead = {first = 0x0, last = 0x0}, callgroup = 0, pickupgroup = 0, flags = 0,
  transfercapability = 0, readq = 0x0, alertpipe = {0, 0}, writetrans = 0x0, readtrans = 0x0, rawreadformat = 0,
  rawwriteformat = 0, spies = 0x0, next = 0x0}
#7  0x080a1666 in post_cdr (cdr=0x82852d0) at cdr.c:824
        i = (struct ast_cdr_beitem *) 0x8136228
#8  0x080a0ce8 in ast_cdr_detach (cdr=0x82852d0) at cdr.c:1013
        newtail = (struct ast_cdr_batch_item *) 0x82852d0
#9  0x08060917 in ast_hangup (chan=0x830f350) at channel.c:1362
        res = 0
#10 0x0808f3df in __ast_pbx_run (c=0x830f350) at pbx.c:2467
        digit = 0
        exten = '\0' <repeats 255 times>
        pos = 0
        waittime = 0
        res = -1
#11 0x0808fe1f in pbx_thread (data=0x0) at pbx.c:2517
No locals.
#12 0x40024e51 in pthread_start_thread () from /lib/libpthread.so.0
No symbol table info available.
#13 0x401ec8aa in clone () from /lib/libc.so.6
No symbol table info available.

(gdb) thread apply all bt

Thread 1 (process 7580):
#0  ast_var_name (var=0x9a200040) at chanvars.c:71
#1  0x0809f2cf in ast_cdr_getvar (cdr=0x9a200040, name=0xb2ffcb8c "disposition", ret=0xb2ffcba0,
    workspace=0xb2ffcc2c "", workspacelen=4096, recur=0) at cdr.c:196
#2  0x405383db in builtin_function_cdr_read (chan=0x0, cmd=0xb2ffcbdc "CDR", data=0xb2ffcb8c "disposition", buf=0x0,
    len=0) at func_cdr.c:69
#3  0x08085029 in ast_func_read (chan=0x0, in=0xb2ffcbe0 "disposition", workspace=0x0, len=0) at pbx.c:1377
#4  0x08085505 in pbx_substitute_variables_helper_full (c=0xb2ffecb4, headp=0xb2fff07c,
    cp1=0x40961900 "\"${CDR(clid)}\",\"${CDR(src)}\",\"${CDR(dst)}\",\"${CDR(dcontext)}\",\"${CDR(channel)}\",\"${CDR(dstchannel)}\",\"${CDR(lastapp)}\",\"${CDR(lastdata)}\",\"${CDR(start)}\",\"${CDR(answer)}\",\"${CDR(end)}\",\"${CDR(duration"..., cp2=0xb2fff14f "", count=1908) at pbx.c:1520
#5  0x08085918 in pbx_substitute_variables_helper (c=0x9a200040, cp1=0x0, cp2=0x0, count=0) at pbx.c:1600
#6  0x4096033b in custom_log (cdr=0x0) at cdr_custom.c:120
#7  0x080a1666 in post_cdr (cdr=0x82852d0) at cdr.c:824
#8  0x080a0ce8 in ast_cdr_detach (cdr=0x82852d0) at cdr.c:1013
#9  0x08060917 in ast_hangup (chan=0x830f350) at channel.c:1362
#10 0x0808f3df in __ast_pbx_run (c=0x830f350) at pbx.c:2467
#11 0x0808fe1f in pbx_thread (data=0x0) at pbx.c:2517
#12 0x40024e51 in pthread_start_thread () from /lib/libpthread.so.0
#13 0x401ec8aa in clone () from /lib/libc.so.6


---------------------
----  crash 2  ------
---------------------

(gdb) bt
#0  0x0809f27f in ast_cdr_getvar (cdr=0x82324c8, name=0x82327a8 "", ret=0xb09fcbb0, workspace=0xb09fcc2c "",
    workspacelen=4096, recur=0) at strings.h:155
#1  0x405383db in builtin_function_cdr_read (chan=0x0, cmd=0xb09fcbec "CDR", data=0xb09fcb9c "userfield",
    buf=0x0, len=0) at func_cdr.c:69
#2  0x08085029 in ast_func_read (chan=0x0, in=0xb09fcbf0 "userfield", workspace=0x0, len=0) at pbx.c:1377
#3  0x08085505 in pbx_substitute_variables_helper_full (c=0xb09fecb4, headp=0xb09ff07c,
    cp1=0x40a61900 "\"${CDR(clid)}\",\"${CDR(src)}\",\"${CDR(dst)}\",\"${CDR(dcontext)}\",\"${CDR(channel)}\",\"${CDR(dstchannel)}\",\"${CDR(lastapp)}\",\"${CDR(lastdata)}\",\"${CDR(start)}\",\"${CDR(answer)}\",\"${CDR(end)}\",\"${CDR(duration"..., cp2=0xb09ff1b2 "", count=1809) at pbx.c:1520
#4  0x08085918 in pbx_substitute_variables_helper (c=0xb09fcc2c, cp1=0x0, cp2=0x0, count=0) at pbx.c:1600
#5  0x40a6033b in custom_log (cdr=0x0) at cdr_custom.c:120
#6  0x080a1666 in post_cdr (cdr=0x82324c8) at cdr.c:824
#7  0x080a0ce8 in ast_cdr_detach (cdr=0x82324c8) at cdr.c:1013
#8  0x08060917 in ast_hangup (chan=0x409423b0) at channel.c:1362
#9  0x0808f3df in __ast_pbx_run (c=0x409423b0) at pbx.c:2467
#10 0x0808fe1f in pbx_thread (data=0x0) at pbx.c:2517
#11 0x40024e51 in pthread_start_thread () from /lib/libpthread.so.0
#12 0x401ec8aa in clone () from /lib/libc.so.6


(gdb) bt full
#0  0x0809f27f in ast_cdr_getvar (cdr=0x82324c8, name=0x82327a8 "", ret=0xb09fcbb0, workspace=0xb09fcc2c "",
    workspacelen=4096, recur=0) at strings.h:155
        tm = {tm_sec = 2, tm_min = 0, tm_hour = -1331704924, tm_mday = 134860445, tm_mon = 2, tm_year = 0,
  tm_wday = -1331704908, tm_yday = 134860445, tm_isdst = -1331704908, tm_gmtoff = 0,
  tm_zone = 0x8 <Address 0x8 out of bounds>}
        t = 1162236337
#1  0x405383db in builtin_function_cdr_read (chan=0x0, cmd=0xb09fcbec "CDR", data=0xb09fcb9c "userfield",
    buf=0x0, len=0) at func_cdr.c:69
        ret = 0x0
        argc = 0
        argv = {0xb09fcb9c "userfield", 0x0}
        recursive = 0
        cdr = (struct ast_cdr *) 0x82324c8
#2  0x08085029 in ast_func_read (chan=0x0, in=0xb09fcbf0 "userfield", workspace=0x0, len=0) at pbx.c:1377
        args = 0xb09fcbf0 "userfield"
        function = 0xb09fecb4 ""
        acfptr = (struct ast_custom_function *) 0xb09fcc2c
#3  0x08085505 in pbx_substitute_variables_helper_full (c=0xb09fecb4, headp=0xb09ff07c,
    cp1=0x40a61900 "\"${CDR(clid)}\",\"${CDR(src)}\",\"${CDR(dst)}\",\"${CDR(dcontext)}\",\"${CDR(channel)}\",\"${C
DR(dstchannel)}\",\"${CDR(lastapp)}\",\"${CDR(lastdata)}\",\"${CDR(start)}\",\"${CDR(answer)}\",\"${CDR(end)}\",\"$
{CDR(duration"..., cp2=0xb09ff1b2 "", count=1809) at pbx.c:1520
        cp4 = 0xb09fcc2c ""
        whereweare = 0x40a61a42 "\"\n"
        length = -1331696460
        offset = 0
        offset2 = -2147483648
        isfunction = 1
        workspace = 0xb09fcc2c ""
        ltmp = 0x0
        var = 0xb09fdc2c "CDR(userfield)"
        nextvar = 0x80fe240 "pbx_substitute_variables_helper_full"
        nextexp = 0x0
        vars = 0x80f9c71 "pbx.c"
        vare = 0xb09fecb4 ""
        pos = -1331696460
        brackets = -1331704788
        needsub = 0
#4  0x08085918 in pbx_substitute_variables_helper (c=0xb09fcc2c, cp1=0x0, cp2=0x0, count=0) at pbx.c:1600
No locals.
#5  0x40a6033b in custom_log (cdr=0x0) at cdr_custom.c:120
        buf = "\"7001\",\"7001\",\"popgpredcall\",\"presence-predictivecall\",\"Local/popgpredcall@presence-predictivecall-d7ca,2\",\"\",\"Wait\",\"600\",\"2006-10-30 20:25:37\",\"2006-10-30 20:25:37\",\"2006-10-30 20:25:37\",\"0\",\"0\",\"\","...
        dummy = {name = '\0' <repeats 79 times>, tech = 0x0, tech_pvt = 0x0, language = '\0' <repeats 19 times>,
  type = 0x0, fds = {0, 0, 0, 0, 0, 0, 0, 0}, musicclass = '\0' <repeats 19 times>, music_state = 0x0,
  generatordata = 0x0, generator = 0x0, _bridge = 0x0, masq = 0x0, masqr = 0x0, cdrflags = 0, _softhangup = 0,
  whentohangup = 0, blocker = 0, lock = {__m_reserved = 0, __m_count = 0, __m_owner = 0x0, __m_kind = 0,
    __m_lock = {__status = 0, __spinlock = 0}}, blockproc = 0x0, appl = 0x0, data = 0x0, fdno = 0, sched = 0x0,
  streamid = 0, stream = 0x0, vstreamid = 0, vstream = 0x0, oldwriteformat = 0, timingfd = 0, timingfunc = 0,
  timingdata = 0x0, _state = 0, rings = 0, nativeformats = 0, readformat = 0, writeformat = 0, cid = {
    cid_dnid = 0x0, cid_num = 0x0, cid_name = 0x0, cid_ani = 0x0, cid_rdnis = 0x0, cid_pres = 0, cid_ani2 = 0,
    cid_ton = 0, cid_tns = 0}, context = '\0' <repeats 79 times>, macrocontext = '\0' <repeats 79 times>,
  macroexten = '\0' <repeats 79 times>, macropriority = 0, exten = '\0' <repeats 79 times>, priority = 0,
  dtmfq = '\0' <repeats 79 times>, dtmff = {frametype = 0, subclass = 0, datalen = 0, samples = 0, mallocd = 0,
    offset = 0, src = 0x0, data = 0x0, delivery = {tv_sec = 0, tv_usec = 0}, prev = 0x0, next = 0x0}, pbx = 0x0,
  amaflags = 0, accountcode = '\0' <repeats 19 times>, cdr = 0x82324c8, adsicpe = 0,
  call_forward = '\0' <repeats 79 times>, zone = 0x0, monitor = 0x0, insmpl = 0, outsmpl = 0, fin = 0, fout = 0,
  uniqueid = '\0' <repeats 31 times>, hangupcause = 0, varshead = {first = 0x0, last = 0x0}, callgroup = 0,
  pickupgroup = 0, flags = 0, transfercapability = 0, readq = 0x0, alertpipe = {0, 0}, writetrans = 0x0,
  readtrans = 0x0, rawreadformat = 0, rawwriteformat = 0, spies = 0x0, next = 0x0}
#6  0x080a1666 in post_cdr (cdr=0x82324c8) at cdr.c:824
        i = (struct ast_cdr_beitem *) 0x40920278
#7  0x080a0ce8 in ast_cdr_detach (cdr=0x82324c8) at cdr.c:1013
        newtail = (struct ast_cdr_batch_item *) 0x82324c8
#8  0x08060917 in ast_hangup (chan=0x409423b0) at channel.c:1362
        res = 0
#9  0x0808f3df in __ast_pbx_run (c=0x409423b0) at pbx.c:2467
        digit = 0
        exten = '\0' <repeats 255 times>
        pos = 0
        waittime = 0
        res = -1
#10 0x0808fe1f in pbx_thread (data=0x0) at pbx.c:2517
No locals.
#11 0x40024e51 in pthread_start_thread () from /lib/libpthread.so.0
No symbol table info available.
#12 0x401ec8aa in clone () from /lib/libc.so.6
No symbol table info available.

(gdb) thread apply all bt

Thread 1 (process 10258):
#0  0x0809f27f in ast_cdr_getvar (cdr=0x82324c8, name=0x82327a8 "", ret=0xb09fcbb0, workspace=0xb09fcc2c "",
    workspacelen=4096, recur=0) at strings.h:155
#1  0x405383db in builtin_function_cdr_read (chan=0x0, cmd=0xb09fcbec "CDR", data=0xb09fcb9c "userfield",
    buf=0x0, len=0) at func_cdr.c:69
#2  0x08085029 in ast_func_read (chan=0x0, in=0xb09fcbf0 "userfield", workspace=0x0, len=0) at pbx.c:1377
#3  0x08085505 in pbx_substitute_variables_helper_full (c=0xb09fecb4, headp=0xb09ff07c,
    cp1=0x40a61900 "\"${CDR(clid)}\",\"${CDR(src)}\",\"${CDR(dst)}\",\"${CDR(dcontext)}\",\"${CDR(channel)}\",\"${CDR(dstchannel)}\",\"${CDR(lastapp)}\",\"${CDR(lastdata)}\",\"${CDR(start)}\",\"${CDR(answer)}\",\"${CDR(end)}\",\"${CDR(duration"..., cp2=0xb09ff1b2 "", count=1809) at pbx.c:1520
#4  0x08085918 in pbx_substitute_variables_helper (c=0xb09fcc2c, cp1=0x0, cp2=0x0, count=0) at pbx.c:1600
#5  0x40a6033b in custom_log (cdr=0x0) at cdr_custom.c:120
#6  0x080a1666 in post_cdr (cdr=0x82324c8) at cdr.c:824
#7  0x080a0ce8 in ast_cdr_detach (cdr=0x82324c8) at cdr.c:1013
#8  0x08060917 in ast_hangup (chan=0x409423b0) at channel.c:1362
#9  0x0808f3df in __ast_pbx_run (c=0x409423b0) at pbx.c:2467
#10 0x0808fe1f in pbx_thread (data=0x0) at pbx.c:2517
#11 0x40024e51 in pthread_start_thread () from /lib/libpthread.so.0
#12 0x401ec8aa in clone () from /lib/libc.so.6