Core was generated by `/usr/sbin/asterisk -f -vvvg -c'.
Program terminated with signal 11, Segmentation fault.
#0  0x0807e160 in ast_queue_frame (chan=0x8683aa0, fin=0xb2b351e0) at channel.c:934
934             AST_LIST_INSERT_TAIL(&chan->readq, f, frame_list);
(gdb) bt full
#0  0x0807e160 in ast_queue_frame (chan=0x8683aa0, fin=0xb2b351e0) at channel.c:934
        f = (struct ast_frame *) 0xb2b06e68
        cur = <value optimized out>
        blah = 1
        qlen = 1
        __PRETTY_FUNCTION__ = "ast_queue_frame"
#1  0xb7504bed in iax2_queue_frame (callno=18, f=0xb2b351e0) at chan_iax2.c:1447
No locals.
#2  0xb7514850 in schedule_delivery (fr=0xb2b351b0, updatehistory=<value optimized out>, fromtrunk=0, tsout=0xb5639cb4)
    at chan_iax2.c:1804
        frame = {data = 0xb761a8b0, ts = -1219313487, ms = -1296870812, type = 3043204436, next = 0xa0, prev = 0xa0}
        type = 1
        len = 20
        needfree = <value optimized out>
#3  0xb7522592 in socket_process (thread=0xb7993b10) at chan_iax2.c:8148
        callno = <value optimized out>
        trunked_ts = <value optimized out>
        len = <value optimized out>
        metatype = <value optimized out>
        sin = {sin_family = 2, sin_port = 55569, sin_addr = {s_addr = 586583234}, sin_zero = "\000\000\000\000\000\000\000"}
        res = 164
        updatehistory = 1
        new = <value optimized out>
        ptr = <value optimized out>
        dcallno = 0
        fh = <value optimized out>
        mth = <value optimized out>
        cur = <value optimized out>
        f = {frametype = AST_FRAME_VOICE, subclass = 8, datalen = 160, samples = 160, mallocd = 0, mallocd_hdr_len = 0, 
  offset = 0, src = 0xb7530b35 "IAX2", data = 0xb7993b94, delivery = {tv_sec = 0, tv_usec = 0}, frame_list = {next = 0x0}, 
  has_timing_info = 0, ts = 0, len = 0, seqno = 0}
        c = <value optimized out>
        dp = <value optimized out>
        tpeer = <value optimized out>
        ies = {called_number = 0x0, calling_number = 0x0, calling_ani = 0x0, calling_name = 0x0, calling_ton = 0, calling_tns = 0, 
  calling_pres = 0, called_context = 0x0, username = 0x0, password = 0x0, capability = 0, format = 0, codec_prefs = 0x0, 
  language = 0x0, version = 0, adsicpe = 0, dnid = 0x0, rdnis = 0x0, authmethods = 0, encmethods = 0, challenge = 0x0, 
  md5_result = 0x0, rsa_result = 0x0, apparent_addr = 0x0, refresh = 0, dpstatus = 0, callno = 0, cause = 0x0, causecode = 0 '\0', 
  iax_unknown = 0 '\0', msgcount = 0, autoanswer = 0, musiconhold = 0, transferid = 0, datetime = 0, devicetype = 0x0, 
  serviceident = 0x0, firmwarever = 0, fwdesc = 0, fwdata = 0x0, fwdatalen = 0 '\0', enckey = 0x0, enckeylen = 0 '\0', 
  provver = 0, samprate = 0, provverpres = 0, rr_jitter = 0, rr_loss = 0, rr_pkts = 0, rr_delay = 0, rr_dropped = 0, rr_ooo = 0}
        ied0 = {buf = '\0' <repeats 1023 times>, pos = 0}
        ied1 = {buf = "\t\004\000\000\000\b", '\0' <repeats 1017 times>, pos = 6}
        format = <value optimized out>
        fd = 10
        exists = <value optimized out>
        minivid = 0
        empty = '\0' <repeats 31 times>
        duped_fr = (struct iax_frame *) 0xb2b351b0
        host_pref_buf = "ØÂcµ\001~Q·\200¨U·\020'\000\000\000õQ·\004", '\0' <repeats 63 times>, " ¨U·\\Âcµ\230¦S·Á0Þ· §S· ¨S·\200§S·È¤\033\b\000\000\000\000\004\000\000\000`c\024\b"
        caller_pref_buf = "Ù,ó·ì§\v\000Ps\033\bÄ\215S·8Ácµ¢ì\016\bPs\033\b\020\000\220·x4ï³\030Ácµ?XÞ·\020\000\220·à\b\000\000l\211S·\b\000\000\000x4ï³°SŲ°$â³ü/\r\000ÿ/\r\000à\b\000\000l\211S·x4ï³÷#ó·XÁcµÞí\016\bPs\033\b\020'\000\000Ù,ó·l\211S·\000\000\000\000x4ï³"
        pref = {order = "q\003\n\000\n\000\000\000\000\000\000\000D:Þ· áê· GH\b\n\000\000\000\000\000\000", 
  framing = "1aó·q\003\n\000\230Î%Gq\003\n\000J.ó·l\211S·\216Î%Gq\003\n"}
        using_prefs = <value optimized out>
        __PRETTY_FUNCTION__ = "socket_process"
#4  0xb752b4f5 in iax2_process_thread (data=0xb7993b10) at chan_iax2.c:8252
        __cancel_buf = {__cancel_jmp_buf = {{__cancel_jmp_buf = {-1219262100, 0, 0, -1251752936, 1248445280, 1213772211}, 
      __mask_was_saved = 0}}, __pad = {0xb563c440, 0x0, 0x0, 0xb563c418}}
        not_first_call = <value optimized out>
        thread = (struct iax2_thread *) 0xb7993b10
        ts = {tv_sec = 0, tv_nsec = 0}
        put_into_idle = <value optimized out>
#5  0x080fb1fb in dummy_start (data=0xb791ea68) at utils.c:806
---Type <return> to continue, or q <return> to quit---
        __cancel_buf = {__cancel_jmp_buf = {{__cancel_jmp_buf = {-1214690280, 0, 0, -1251752840, 1248445472, -150621724}, 
      __mask_was_saved = 0}}, __pad = {0xb563c4b0, 0x0, 0x0, 0x0}}
        __cancel_arg = (void *) 0xb563cba0
        not_first_call = <value optimized out>
        ret = <value optimized out>
#6  0xb7f30504 in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#7  0xb7e4a51e in clone () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.