Thread 1 (process 23867):
#0  0x08088780 in ast_channel_free (chan=0x92fdd38) at channel.c:1166
1166            while ((vardata = AST_LIST_REMOVE_HEAD(headp, entries)))
#1  0x080898bb in ast_hangup (chan=0x92fdd38) at channel.c:1489
#2  0x008571ab in dial_exec_full (chan=0xb7afb390, data=0xb6c1eea8, peerflags=0xb6c1ccf0, continue_exec=0x0)
    at app_dial.c:1813
#3  0x008573af in dial_exec (chan=0xb7afb390, data=0xb6c1eea8) at app_dial.c:1846
#4  0x080d918f in pbx_exec (c=0xb7afb390, app=0xb7ab5ef0, data=0xb6c1eea8) at pbx.c:597
#5  0x080dcda4 in pbx_extension_helper (c=0xb7afb390, con=0x0, context=0xb7afb5d8 "inbound", 
    exten=0xb7afb628 "0118198931", priority=9, label=0x0, callerid=0xb7ae5810 "0532471811", action=E_SPAWN)
    at pbx.c:1908
#6  0x080deebf in ast_spawn_extension (c=0xb7afb390, context=0xb7afb5d8 "inbound", 
    exten=0xb7afb628 "XXXXXXXXXX", priority=9, callerid=0xb7ae5810 "XXXXXXXXXX") at pbx.c:2399
#7  0x080df3ef in __ast_pbx_run (c=0xb7afb390) at pbx.c:2498
#8  0x080e077c in pbx_thread (data=0xb7afb390) at pbx.c:2754
#9  0x08126e87 in dummy_start (data=0xb7c30c88) at utils.c:857
#10 0x004a645b in start_thread () from /lib/libpthread.so.0
#11 0x00a2a24e in clone () from /lib/libc.so.6

Thread 1 (process 23867):
#0  0x08088780 in ast_channel_free (chan=0x92fdd38) at channel.c:1166
	cur = (struct ast_var_t *) 0x10
	fd = 203
	i = 10
	vardata = (struct ast_var_t *) 0x92e10b0
	f = (struct ast_frame *) 0x0
	headp = (struct varshead *) 0x92fe144
	datastore = (struct ast_datastore *) 0x0
	name = "Zap/9-1\000\001\000\000\000ȼÁ¶\220\033¶´=\026\bÙK\026\bؼÁ¶\200\230J\0008½Á¶ì\\\b\b¸Ý/\t=\016\030\bÛ\r\030\b\bW/\t\000\000\000\000\000\000\000\000\220¼Á¶\000\000\000\000\b\217¡·"
	__PRETTY_FUNCTION__ = "ast_channel_free"
#1  0x080898bb in ast_hangup (chan=0x92fdd38) at channel.c:1489
	res = 0
	cdr = (struct ast_cdr *) 0x0
	__PRETTY_FUNCTION__ = "ast_hangup"
#2  0x008571ab in dial_exec_full (chan=0xb7afb390, data=0xb6c1eea8, peerflags=0xb6c1ccf0, continue_exec=0x0)
    at app_dial.c:1813
	number = 0x92e10c9 "g1/XXXXXXX"
	end_time = 1195656567
	answer_time = 1195656530
	toast = "39\000\000Ù¯J\000\000\000\000\000Ñk£\000 \221©\000 \221©\000ô\177©\000Äh\234\000ô\177©\000\214¿Á¶ë«\236", '\0' <repeats 13 times>, "\004 ©\000@¿Á¶\000\000\000\000Û\003\234\000  ©\000\000\000\000"
	res = -1
	rest = 0x0
	cur = 0x0
	outgoing = (struct chanlist *) 0x0
	peer = (struct ast_channel *) 0x92fdd38
	to = -1
	num = {chan = 0xb7afb390, busy = 0, congestion = 0, nochan = 0}
	cause = 0
	numsubst = "g1/XXXXXXX", '\0' <repeats 37 times>, "9", '\0' <repeats 92 times>, "¤ï\233\000\000\000\000\000\000\000\000\000ô\177©\000\000\000\000\000\000\000\000\000M\002\234\000LËÁ¶\004.-\t\003/-\t4ÍÁ¶ô\177©\000LËÁ¶\004.-\t8ÌÁ¶d\237\233\000LËÁ¶0|\027\bLÍÁ¶\004.-\t\000\000\000\000ìËÁ¶ÿ\000\000\000±+\234\000\004.-\t\004.-\t\004.-\t\004.-\t\233.-\t"
	cidname = '\0' <repeats 79 times>
	config = {features_caller = {flags = 0}, features_callee = {flags = 0}, start_time = {
    tv_sec = 1195656530, tv_usec = 366996}, feature_timer = 0, timelimit = 0, play_warning = 0, 
  warning_freq = 0, warning_sound = 0x0, end_sound = 0x0, start_sound = 0x0, firstpass = 0, flags = 0}
	calldurationlimit = 0
	dtmfcalled = 0x0
	dtmfcalling = 0x0
	pa = {sentringing = 0, privdb_val = 0, privcid = '\0' <repeats 255 times>, 
  privintro = '\0' <repeats 1023 times>, status = "ANSWER\000R\000GS", '\0' <repeats 244 times>}
	sentringing = 0
	moh = 0
	outbound_group = 0x0
	result = 0
	start_time = 1195656528
	parse = 0xb6c1bde0 "ZAP"
	opermode = 0
	args = {argc = 3, argv = 0xb6c1c3b8, peers = 0xb6c1bde0 "ZAP", timeout = 0xb6c1bdef "", 
  options = 0xb6c1bdf0 "g", url = 0x0}
	opts = {flags = 32}
	opt_args = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}
	__PRETTY_FUNCTION__ = "dial_exec_full"
#3  0x008573af in dial_exec (chan=0xb7afb390, data=0xb6c1eea8) at app_dial.c:1846
	peerflags = {flags = 4294967328}
#4  0x080d918f in pbx_exec (c=0xb7afb390, app=0xb7ab5ef0, data=0xb6c1eea8) at pbx.c:597
	res = -1228804440
	u = (struct ast_module_user *) 0x9303fe8
	saved_c_appl = 0x0
	saved_c_data = 0x0
#5  0x080dcda4 in pbx_extension_helper (c=0xb7afb390, con=0x0, context=0xb7afb5d8 "inbound", 
    exten=0xb7afb628 "XXXXXXXXXX", priority=9, label=0x0, callerid=0xb7ae5810 "XXXXXXXXXX", action=E_SPAWN)
    at pbx.c:1908
	e = (struct ast_exten *) 0xb7c76568
	app = (struct ast_app *) 0xb7ab5ef0
	res = -1228792944
	q = {incstack = {0x0 <repeats 128 times>}, stacklen = 0, status = 5, swo = 0x0, data = 0x0, 
  foundcontext = 0xb7afb5d8 "inbound"}
	passdata = "ZAP/g1/XXXXXXX,,g", '\0' <repeats 8174 times>
	matching_action = 0
	__PRETTY_FUNCTION__ = "pbx_extension_helper"
#6  0x080deebf in ast_spawn_extension (c=0xb7afb390, context=0xb7afb5d8 "inbound", 
    exten=0xb7afb628 "XXXXXXXXXX", priority=9, callerid=0xb7ae5810 "XXXXXXXXXX") at pbx.c:2399
No locals.
#7  0x080df3ef in __ast_pbx_run (c=0xb7afb390) at pbx.c:2498
	dst_exten = "ü\021¶ý,\234", '\0' <repeats 17 times>, "ÿÿÿÿ", '\0' <repeats 12 times>, "À\223©\000ç\021¶\000\000\000\000P\221©", '\0' <repeats 13 times>, "0\002\000\000\000\000\000\000(É/\t@\000\000\000\005\000\000\000\220\033¶\221\203J\000Ø\021¶\027N\022\b\214\224J\000\023e\022\b0\000\000\000\001\000\000\000\214\224J\000\220\033¶0\002\000\000~\022\027\bØ\021¶@\000\000\000\b\022¶±+\234\000\214\224J\000(\002\000\000Ô\021\027\b\001\000\000\000ô\177©\000 \221©\000(\002\000\0000É/\t\027A\234\0000É/\t\000\000\000\000,\002\000\000±<\000\000PC3\t(\002\000\000"...
	pos = 0
	digit = 0
	found = 1
	res = 0
	autoloopflag = 0
	error = 0
	__PRETTY_FUNCTION__ = "__ast_pbx_run"
#8  0x080e077c in pbx_thread (data=0xb7afb390) at pbx.c:2754
	c = (struct ast_channel *) 0xb7afb390
#9  0x08126e87 in dummy_start (data=0xb7c30c88) at utils.c:857
	__cancel_buf = {__cancel_jmp_buf = {{__cancel_jmp_buf = {4935668, 0, -1228792944, -1228794968, 
        108067385, -1197439833}, __mask_was_saved = 0}}, __pad = {0xb6c21460, 0x0, 0x0, 0x92a1b80}}
	__cancel_routine = (void (*)(void *)) 0x806ccd9 <ast_unregister_thread>
	__cancel_arg = (void *) 0xb6c21b90
	not_first_call = 0
	ret = (void *) 0x4a5b7c
	a = {start_routine = 0x80e0765 <pbx_thread>, data = 0xb7afb390, 
  name = 0xb7c36440 "pbx_thread", ' ' <repeats 11 times>, "started at [ 2775] pbx.c ast_pbx_start()"}
	lock_info = (struct thr_lock_info *) 0x92fc930
#10 0x004a645b in start_thread () from /lib/libpthread.so.0
No symbol table info available.
#11 0x00a2a24e in clone () from /lib/libc.so.6
No symbol table info available.