Core was generated by `/usr/sbin/asterisk -f -vvvg -c'.
Program terminated with signal 11, Segmentation fault.
#0  0x00a72c93 in strchr () from /lib/libc.so.6
(gdb)
(gdb) bt
#0  0x00a72c93 in strchr () from /lib/libc.so.6
#1  0x0039bb3f in acf_vmcount_exec (chan=0x8a14300, cmd=0x2069830 "VMCOUNT", argsstr=0x2069838 "", buf=0x2068820 "", len=4096) at app_hasnewvoicemail.c:170
#2  0x080c20de in ast_func_read (chan=0x8a14300, function=0x2069830 "VMCOUNT", workspace=0x2068820 "", len=4096) at pbx.c:1527
#3  0x080c465d in pbx_substitute_variables_helper_full (c=0x8a14300, headp=0x8a14644, cp1=<value optimized out>, cp2=0x206f978 "", count=8191) at pbx.c:1646
#4  0x080c5941 in pbx_extension_helper (c=0x8a14300, con=0x0, context=0x8a14480 "vmail", exten=0x8a144d0 "h", priority=1, label=0x0, callerid=0x8a0a240 "",
    action=E_SPAWN) at pbx.c:1741
#5  0x080c7bf4 in __ast_pbx_run (c=0x8a14300) at pbx.c:2288
#6  0x080c8677 in ast_pbx_run (c=0x8a14300) at pbx.c:2644
#7  0x006cc65f in ss_thread (data=0x8a14300) at chan_zap.c:6520
#8  0x080f439b in dummy_start (data=0x8a147b0) at utils.c:775
#9  0x00b7a2db in start_thread () from /lib/libpthread.so.0
#10 0x00ad412e in clone () from /lib/libc.so.6
(gdb) bt full
#0  0x00a72c93 in strchr () from /lib/libc.so.6
No symbol table info available.
#1  0x0039bb3f in acf_vmcount_exec (chan=0x8a14300, cmd=0x2069830 "VMCOUNT", argsstr=0x2069838 "", buf=0x2068820 "", len=4096) at app_hasnewvoicemail.c:170
        u = (struct ast_module_user *) 0x8a12b78
        context = <value optimized out>
        args = {argc = 0, argv = 0x20687a0, vmbox = 0x0, folder = 0x0}
#2  0x080c20de in ast_func_read (chan=0x8a14300, function=0x2069830 "VMCOUNT", workspace=0x2068820 "", len=4096) at pbx.c:1527
        args = 0x2069838 ""
        acfptr = (struct ast_custom_function *) 0x39dda0
        __PRETTY_FUNCTION__ = "ast_func_read"
#3  0x080c465d in pbx_substitute_variables_helper_full (c=0x8a14300, headp=0x8a14644, cp1=<value optimized out>, cp2=0x206f978 "", count=8191) at pbx.c:1646
        cp4 = 0x8a0f864 "NoOp"
        whereweare = 0xb7d113ac ""
        length = <value optimized out>
        offset = 0
        offset2 = 2147483647
        isfunction = 1
        workspace = <value optimized out>
        ltmp = 0x2069830 "VMCOUNT"
        var = <value optimized out>
        nextvar = <value optimized out>
        nextexp = 0x0
        nextthing = <value optimized out>
        vars = 0x2069830 "VMCOUNT"
        vare = <value optimized out>
        pos = <value optimized out>
        brackets = <value optimized out>
        needsub = <value optimized out>
        __PRETTY_FUNCTION__ = "pbx_substitute_variables_helper_full"
#4  0x080c5941 in pbx_extension_helper (c=0x8a14300, con=0x0, context=0x8a14480 "vmail", exten=0x8a144d0 "h", priority=1, label=0x0, callerid=0x8a0a240 "",
    action=E_SPAWN) at pbx.c:1741
        e = (struct ast_exten *) 0xb7d11c68
        app = (struct ast_app *) 0x8a0f850
        res = <value optimized out>
        q = {incstack = {0x0 <repeats 128 times>}, stacklen = 0, status = 5, swo = 0x0, data = 0x0, foundcontext = 0x8a14480 "vmail"}
        passdata = '\0' <repeats 8191 times>

        matching_action = 0
        __PRETTY_FUNCTION__ = "pbx_extension_helper"
#5  0x080c7bf4 in __ast_pbx_run (c=0x8a14300) at pbx.c:2288
        waittime = <value optimized out>
        dst_exten = "#02#\000\000\000\000\001\000\000\000\030\035\a\002@§\006\bÐ6ö·\027\000\000\000X\035\a\002\000\000\000\000P\000\000\000(\001\000\000\000\000\000\000\033[1;30;40m  \220\035\a\002XvÔ·Qâi\00040m\000\221·\000.P\017\bJ\206àS\000\000\000\000°sm\000Ä\035\a\002|Ó·\000(%¡\b\000\000\000\000\001\000\000\000,%¡\b\000\000\000\000\221·\000\000\000\000\000Ä\035\a\002`\r\000\000¸\035\a\002d²\n\b|Ó·\000\236í\022\b|\003\000\000\001\000\000\000\217\016\023\b\000\000\000\000\000C¡\bè\207Ô·H\035\a\002p×·\000\230\035\a\002¢Ê\v\b\034ó\024\b"...
        pos = 78
        digit = <value optimized out>
        found = 1
        res = 35
        error = <value optimized out>
        __PRETTY_FUNCTION__ = "__ast_pbx_run"
#6  0x080c8677 in ast_pbx_run (c=0x8a14300) at pbx.c:2644
        res = AST_PBX_CALL_LIMIT
#7  0x006cc65f in ss_thread (data=0x8a14300) at chan_zap.c:6520
        __r0 = <value optimized out>
        __r1 = <value optimized out>
        __r2 = <value optimized out>
        stringp = <value optimized out>
        p = <value optimized out>
        exten = '\0' <repeats 79 times>
        exten2 = '\0' <repeats 79 times>
        buf = '\0' <repeats 255 times>
        dtmfcid = '\0' <repeats 299 times>
        dtmfbuf = '\0' <repeats 299 times>
        cs = (struct callerid_state *) 0x0
        name = 0x0
        number = 0x0
        distMatches = 0
        curRingData = {144778520, 144787416, 34024336}
        receivedRingT = 0
        counter = <value optimized out>
        samples = 0
        smdi_msg = (struct ast_smdi_md_message *) 0x0
        flags = 10680625
        i = 1
        timeout = <value optimized out>
        getforward = <value optimized out>
        s1 = <value optimized out>
        s2 = <value optimized out>
        len = 0
        res = <value optimized out>
        index = 0
        __PRETTY_FUNCTION__ = "ss_thread"
#8  0x080f439b in dummy_start (data=0x8a147b0) at utils.c:775
        __cancel_buf = {__cancel_jmp_buf = {{__cancel_jmp_buf = {144787416, 0, 34024336, 34022328, 1128991126, 1229154674}, __mask_was_saved = 0}}, __pad = {
    0x2072470, 0x0, 0x0, 0x0}}
        __cancel_arg = (void *) 0x2072b90
        not_first_call = <value optimized out>
        ret = <value optimized out>
#9  0x00b7a2db in start_thread () from /lib/libpthread.so.0
No symbol table info available.
#10 0x00ad412e in clone () from /lib/libc.so.6
No symbol table info available.
(gdb) thread apply bt full
(gdb)