==5732== Memcheck, a memory error detector. ==5732== Copyright (C) 2002-2006, and GNU GPL'd, by Julian Seward et al. ==5732== Using LibVEX rev 1658, a library for dynamic binary translation. ==5732== Copyright (C) 2004-2006, and GNU GPL'd, by OpenWorks LLP. ==5732== Using valgrind-3.2.1, a dynamic binary instrumentation framework. ==5732== Copyright (C) 2000-2006, and GNU GPL'd, by Julian Seward et al. ==5732== For more details, rerun with: -v ==5732== ==5732== My PID = 5732, parent PID = 4835. Prog and args are: ==5732== asterisk ==5732== -vvvvcg ==5732== ==5732== Invalid read of size 4 ==5732== at 0x4677935D: _dl_close (in /lib/ld-2.5.so) ==5732== by 0x468ECDA3: dlclose_doit (in /lib/libdl-2.5.so) ==5732== by 0x46774C05: _dl_catch_error (in /lib/ld-2.5.so) ==5732== by 0x468ED38B: _dlerror_run (in /lib/libdl-2.5.so) ==5732== by 0x468ECDD9: dlclose (in /lib/libdl-2.5.so) ==5732== by 0x80AF479: load_dynamic_module (loader.c:389) ==5732== by 0x80AFF0C: load_resource (loader.c:646) ==5732== by 0x80B06F1: load_modules (loader.c:847) ==5732== by 0x80716AC: main (asterisk.c:2936) ==5732== Address 0x4068408 is 24 bytes inside a block of size 642 free'd ==5732== at 0x400501A: free (vg_replace_malloc.c:233) ==5732== by 0x467798E2: _dl_close (in /lib/ld-2.5.so) ==5732== by 0x468ECDA3: dlclose_doit (in /lib/libdl-2.5.so) ==5732== by 0x46774C05: _dl_catch_error (in /lib/ld-2.5.so) ==5732== by 0x468ED38B: _dlerror_run (in /lib/libdl-2.5.so) ==5732== by 0x468ECDD9: dlclose (in /lib/libdl-2.5.so) ==5732== by 0x80AF479: load_dynamic_module (loader.c:389) ==5732== by 0x80AFF0C: load_resource (loader.c:646) ==5732== by 0x80B06F1: load_modules (loader.c:847) ==5732== by 0x80716AC: main (asterisk.c:2936) ==5732== ==5732== Invalid read of size 1 ==5732== at 0x46779360: _dl_close (in /lib/ld-2.5.so) ==5732== by 0x468ECDA3: dlclose_doit (in /lib/libdl-2.5.so) ==5732== by 0x46774C05: _dl_catch_error (in /lib/ld-2.5.so) ==5732== by 0x468ED38B: _dlerror_run (in /lib/libdl-2.5.so) ==5732== by 0x468ECDD9: dlclose (in /lib/libdl-2.5.so) ==5732== by 0x80AF479: load_dynamic_module (loader.c:389) ==5732== by 0x80AFF0C: load_resource (loader.c:646) ==5732== by 0x80B06F1: load_modules (loader.c:847) ==5732== by 0x80716AC: main (asterisk.c:2936) ==5732== Address 0x40685F4 is 516 bytes inside a block of size 642 free'd ==5732== at 0x400501A: free (vg_replace_malloc.c:233) ==5732== by 0x467798E2: _dl_close (in /lib/ld-2.5.so) ==5732== by 0x468ECDA3: dlclose_doit (in /lib/libdl-2.5.so) ==5732== by 0x46774C05: _dl_catch_error (in /lib/ld-2.5.so) ==5732== by 0x468ED38B: _dlerror_run (in /lib/libdl-2.5.so) ==5732== by 0x468ECDD9: dlclose (in /lib/libdl-2.5.so) ==5732== by 0x80AF479: load_dynamic_module (loader.c:389) ==5732== by 0x80AFF0C: load_resource (loader.c:646) ==5732== by 0x80B06F1: load_modules (loader.c:847) ==5732== by 0x80716AC: main (asterisk.c:2936) ==5732== ==5732== Invalid read of size 4 ==5732== at 0x46779373: _dl_close (in /lib/ld-2.5.so) ==5732== by 0x468ECDA3: dlclose_doit (in /lib/libdl-2.5.so) ==5732== by 0x46774C05: _dl_catch_error (in /lib/ld-2.5.so) ==5732== by 0x468ED38B: _dlerror_run (in /lib/libdl-2.5.so) ==5732== by 0x468ECDD9: dlclose (in /lib/libdl-2.5.so) ==5732== by 0x80AF479: load_dynamic_module (loader.c:389) ==5732== by 0x80AFF0C: load_resource (loader.c:646) ==5732== by 0x80B06F1: load_modules (loader.c:847) ==5732== by 0x80716AC: main (asterisk.c:2936) ==5732== Address 0x4068578 is 392 bytes inside a block of size 642 free'd ==5732== at 0x400501A: free (vg_replace_malloc.c:233) ==5732== by 0x467798E2: _dl_close (in /lib/ld-2.5.so) ==5732== by 0x468ECDA3: dlclose_doit (in /lib/libdl-2.5.so) ==5732== by 0x46774C05: _dl_catch_error (in /lib/ld-2.5.so) ==5732== by 0x468ED38B: _dlerror_run (in /lib/libdl-2.5.so) ==5732== by 0x468ECDD9: dlclose (in /lib/libdl-2.5.so) ==5732== by 0x80AF479: load_dynamic_module (loader.c:389) ==5732== by 0x80AFF0C: load_resource (loader.c:646) ==5732== by 0x80B06F1: load_modules (loader.c:847) ==5732== by 0x80716AC: main (asterisk.c:2936) ==5732== ==5732== Invalid read of size 4 ==5732== at 0x46779CF5: _dl_close (in /lib/ld-2.5.so) ==5732== by 0x468ECDA3: dlclose_doit (in /lib/libdl-2.5.so) ==5732== by 0x46774C05: _dl_catch_error (in /lib/ld-2.5.so) ==5732== by 0x468ED38B: _dlerror_run (in /lib/libdl-2.5.so) ==5732== by 0x468ECDD9: dlclose (in /lib/libdl-2.5.so) ==5732== by 0x80AF479: load_dynamic_module (loader.c:389) ==5732== by 0x80AFF0C: load_resource (loader.c:646) ==5732== by 0x80B06F1: load_modules (loader.c:847) ==5732== by 0x80716AC: main (asterisk.c:2936) ==5732== Address 0x40683F4 is 4 bytes inside a block of size 642 free'd ==5732== at 0x400501A: free (vg_replace_malloc.c:233) ==5732== by 0x467798E2: _dl_close (in /lib/ld-2.5.so) ==5732== by 0x468ECDA3: dlclose_doit (in /lib/libdl-2.5.so) ==5732== by 0x46774C05: _dl_catch_error (in /lib/ld-2.5.so) ==5732== by 0x468ED38B: _dlerror_run (in /lib/libdl-2.5.so) ==5732== by 0x468ECDD9: dlclose (in /lib/libdl-2.5.so) ==5732== by 0x80AF479: load_dynamic_module (loader.c:389) ==5732== by 0x80AFF0C: load_resource (loader.c:646) ==5732== by 0x80B06F1: load_modules (loader.c:847) ==5732== by 0x80716AC: main (asterisk.c:2936) ==5732== ==5732== Invalid read of size 1 ==5732== at 0x4006298: strlen (mc_replace_strmem.c:247) ==5732== by 0x46774D01: _dl_signal_error (in /lib/ld-2.5.so) ==5732== by 0x46779D0A: _dl_close (in /lib/ld-2.5.so) ==5732== by 0x468ECDA3: dlclose_doit (in /lib/libdl-2.5.so) ==5732== by 0x46774C05: _dl_catch_error (in /lib/ld-2.5.so) ==5732== by 0x468ED38B: _dlerror_run (in /lib/libdl-2.5.so) ==5732== by 0x468ECDD9: dlclose (in /lib/libdl-2.5.so) ==5732== by 0x80AF479: load_dynamic_module (loader.c:389) ==5732== by 0x80AFF0C: load_resource (loader.c:646) ==5732== by 0x80B06F1: load_modules (loader.c:847) ==5732== by 0x80716AC: main (asterisk.c:2936) ==5732== Address 0x4068390 is 0 bytes inside a block of size 42 free'd ==5732== at 0x400501A: free (vg_replace_malloc.c:233) ==5732== by 0x46779860: _dl_close (in /lib/ld-2.5.so) ==5732== by 0x468ECDA3: dlclose_doit (in /lib/libdl-2.5.so) ==5732== by 0x46774C05: _dl_catch_error (in /lib/ld-2.5.so) ==5732== by 0x468ED38B: _dlerror_run (in /lib/libdl-2.5.so) ==5732== by 0x468ECDD9: dlclose (in /lib/libdl-2.5.so) ==5732== by 0x80AF479: load_dynamic_module (loader.c:389) ==5732== by 0x80AFF0C: load_resource (loader.c:646) ==5732== by 0x80B06F1: load_modules (loader.c:847) ==5732== by 0x80716AC: main (asterisk.c:2936) ==5732== ==5732== Invalid read of size 1 ==5732== at 0x40062A3: strlen (mc_replace_strmem.c:247) ==5732== by 0x46774D01: _dl_signal_error (in /lib/ld-2.5.so) ==5732== by 0x46779D0A: _dl_close (in /lib/ld-2.5.so) ==5732== by 0x468ECDA3: dlclose_doit (in /lib/libdl-2.5.so) ==5732== by 0x46774C05: _dl_catch_error (in /lib/ld-2.5.so) ==5732== by 0x468ED38B: _dlerror_run (in /lib/libdl-2.5.so) ==5732== by 0x468ECDD9: dlclose (in /lib/libdl-2.5.so) ==5732== by 0x80AF479: load_dynamic_module (loader.c:389) ==5732== by 0x80AFF0C: load_resource (loader.c:646) ==5732== by 0x80B06F1: load_modules (loader.c:847) ==5732== by 0x80716AC: main (asterisk.c:2936) ==5732== Address 0x4068391 is 1 bytes inside a block of size 42 free'd ==5732== at 0x400501A: free (vg_replace_malloc.c:233) ==5732== by 0x46779860: _dl_close (in /lib/ld-2.5.so) ==5732== by 0x468ECDA3: dlclose_doit (in /lib/libdl-2.5.so) ==5732== by 0x46774C05: _dl_catch_error (in /lib/ld-2.5.so) ==5732== by 0x468ED38B: _dlerror_run (in /lib/libdl-2.5.so) ==5732== by 0x468ECDD9: dlclose (in /lib/libdl-2.5.so) ==5732== by 0x80AF479: load_dynamic_module (loader.c:389) ==5732== by 0x80AFF0C: load_resource (loader.c:646) ==5732== by 0x80B06F1: load_modules (loader.c:847) ==5732== by 0x80716AC: main (asterisk.c:2936) ==5732== ==5732== Invalid read of size 2 ==5732== at 0x4677C6BA: memcpy (in /lib/ld-2.5.so) ==5732== by 0x46779D0A: _dl_close (in /lib/ld-2.5.so) ==5732== by 0x468ECDA3: dlclose_doit (in /lib/libdl-2.5.so) ==5732== by 0x46774C05: _dl_catch_error (in /lib/ld-2.5.so) ==5732== by 0x468ED38B: _dlerror_run (in /lib/libdl-2.5.so) ==5732== by 0x468ECDD9: dlclose (in /lib/libdl-2.5.so) ==5732== by 0x80AF479: load_dynamic_module (loader.c:389) ==5732== by 0x80AFF0C: load_resource (loader.c:646) ==5732== by 0x80B06F1: load_modules (loader.c:847) ==5732== by 0x80716AC: main (asterisk.c:2936) ==5732== Address 0x4068390 is 0 bytes inside a block of size 42 free'd ==5732== at 0x400501A: free (vg_replace_malloc.c:233) ==5732== by 0x46779860: _dl_close (in /lib/ld-2.5.so) ==5732== by 0x468ECDA3: dlclose_doit (in /lib/libdl-2.5.so) ==5732== by 0x46774C05: _dl_catch_error (in /lib/ld-2.5.so) ==5732== by 0x468ED38B: _dlerror_run (in /lib/libdl-2.5.so) ==5732== by 0x468ECDD9: dlclose (in /lib/libdl-2.5.so) ==5732== by 0x80AF479: load_dynamic_module (loader.c:389) ==5732== by 0x80AFF0C: load_resource (loader.c:646) ==5732== by 0x80B06F1: load_modules (loader.c:847) ==5732== by 0x80716AC: main (asterisk.c:2936) ==5732== ==5732== Invalid read of size 4 ==5732== at 0x4677C6BC: memcpy (in /lib/ld-2.5.so) ==5732== by 0x46779D0A: _dl_close (in /lib/ld-2.5.so) ==5732== by 0x468ECDA3: dlclose_doit (in /lib/libdl-2.5.so) ==5732== by 0x46774C05: _dl_catch_error (in /lib/ld-2.5.so) ==5732== by 0x468ED38B: _dlerror_run (in /lib/libdl-2.5.so) ==5732== by 0x468ECDD9: dlclose (in /lib/libdl-2.5.so) ==5732== by 0x80AF479: load_dynamic_module (loader.c:389) ==5732== by 0x80AFF0C: load_resource (loader.c:646) ==5732== by 0x80B06F1: load_modules (loader.c:847) ==5732== by 0x80716AC: main (asterisk.c:2936) ==5732== Address 0x4068392 is 2 bytes inside a block of size 42 free'd ==5732== at 0x400501A: free (vg_replace_malloc.c:233) ==5732== by 0x46779860: _dl_close (in /lib/ld-2.5.so) ==5732== by 0x468ECDA3: dlclose_doit (in /lib/libdl-2.5.so) ==5732== by 0x46774C05: _dl_catch_error (in /lib/ld-2.5.so) ==5732== by 0x468ED38B: _dlerror_run (in /lib/libdl-2.5.so) ==5732== by 0x468ECDD9: dlclose (in /lib/libdl-2.5.so) ==5732== by 0x80AF479: load_dynamic_module (loader.c:389) ==5732== by 0x80AFF0C: load_resource (loader.c:646) ==5732== by 0x80B06F1: load_modules (loader.c:847) ==5732== by 0x80716AC: main (asterisk.c:2936) ==5732== ==5732== Invalid read of size 1 ==5732== at 0x4677C6B5: memcpy (in /lib/ld-2.5.so) ==5732== by 0x46779D0A: _dl_close (in /lib/ld-2.5.so) ==5732== by 0x468ECDA3: dlclose_doit (in /lib/libdl-2.5.so) ==5732== by 0x46774C05: _dl_catch_error (in /lib/ld-2.5.so) ==5732== by 0x468ED38B: _dlerror_run (in /lib/libdl-2.5.so) ==5732== by 0x468ECDD9: dlclose (in /lib/libdl-2.5.so) ==5732== by 0x80AF479: load_dynamic_module (loader.c:389) ==5732== by 0x80AFF0C: load_resource (loader.c:646) ==5732== by 0x80B06F1: load_modules (loader.c:847) ==5732== by 0x80716AC: main (asterisk.c:2936) ==5732== Address 0x40689E8 is 0 bytes inside a block of size 49 free'd ==5732== at 0x400501A: free (vg_replace_malloc.c:233) ==5732== by 0x46779860: _dl_close (in /lib/ld-2.5.so) ==5732== by 0x468ECDA3: dlclose_doit (in /lib/libdl-2.5.so) ==5732== by 0x46774C05: _dl_catch_error (in /lib/ld-2.5.so) ==5732== by 0x468ED38B: _dlerror_run (in /lib/libdl-2.5.so) ==5732== by 0x468ECDD9: dlclose (in /lib/libdl-2.5.so) ==5732== by 0x80AF479: load_dynamic_module (loader.c:389) ==5732== by 0x80AFF0C: load_resource (loader.c:646) ==5732== by 0x80B06F1: load_modules (loader.c:847) ==5732== by 0x80716AC: main (asterisk.c:2936) ==5732== ==5732== Syscall param ioctl(generic) points to uninitialised byte(s) ==5732== at 0x46849559: ioctl (in /lib/libc-2.5.so) ==5732== by 0x47A8489: ??? (chan_zap.c:10512) ==5732== by 0x47A8762: ??? (chan_zap.c:10562) ==5732== by 0x47AC8FC: ??? (chan_zap.c:11298) ==5732== by 0x47ACC6E: ??? (chan_zap.c:11359) ==5732== by 0x80AFFEB: load_resource (loader.c:672) ==5732== by 0x80B0827: load_modules (loader.c:866) ==5732== by 0x80716AC: main (asterisk.c:2936) ==5732== Address 0xBEED9FBC is on thread 1's stack ==5732== ==5732== Syscall param ioctl(generic) points to uninitialised byte(s) ==5732== at 0x46849559: ioctl (in /lib/libc-2.5.so) ==5732== by 0x47ACABC: ??? (chan_zap.c:11326) ==5732== by 0x47ACC6E: ??? (chan_zap.c:11359) ==5732== by 0x80AFFEB: load_resource (loader.c:672) ==5732== by 0x80B0827: load_modules (loader.c:866) ==5732== by 0x80716AC: main (asterisk.c:2936) ==5732== Address 0xBEEDE1B4 is on thread 1's stack ==5732== Warning: invalid file descriptor -1 in syscall read() ==5732== Warning: invalid file descriptor -1 in syscall read() ==5732== ==5732== Thread 8: ==5732== Conditional jump or move depends on uninitialised value(s) ==5732== at 0x45DE203: ??? (chan_sip.c:5459) ==5732== by 0x4606A62: ??? (chan_sip.c:13806) ==5732== by 0x460CE76: ??? (chan_sip.c:15221) ==5732== by 0x460D8A8: ??? (chan_sip.c:15369) ==5732== by 0x80ACF0F: ast_io_wait (io.c:279) ==5732== by 0x460E20F: ??? (chan_sip.c:15579) ==5732== by 0x80FF911: dummy_start (utils.c:852) ==5732== by 0x468F73DA: start_thread (in /lib/libpthread-2.5.so) ==5732== by 0x4685106D: clone (in /lib/libc-2.5.so) ==5732== ==5732== Thread 38: ==5732== Invalid read of size 4 ==5732== at 0x8085265: ast_write (channel.c:2863) ==5732== by 0x80893D3: ast_generic_bridge (channel.c:4141) ==5732== by 0x808A476: ast_channel_bridge (channel.c:4392) ==5732== by 0x421E120: ast_bridge_call (res_features.c:1412) ==5732== by 0x46739D1: ??? (app_dial.c:1701) ==5732== by 0x4673D04: ??? (app_dial.c:1755) ==5732== by 0x80BDF3A: pbx_exec (pbx.c:532) ==5732== by 0x80C13B9: pbx_extension_helper (pbx.c:1851) ==5732== by 0x80C24B4: ast_spawn_extension (pbx.c:2306) ==5732== by 0x80C29D0: __ast_pbx_run (pbx.c:2408) ==5732== by 0x80C3784: pbx_thread (pbx.c:2623) ==5732== by 0x80FF911: dummy_start (utils.c:852) ==5732== Address 0x57DB62C is 108 bytes inside a block of size 8,280 free'd ==5732== at 0x400501A: free (vg_replace_malloc.c:233) ==5732== by 0x8071CE2: __ast_free_region (astmm.c:174) ==5732== by 0x8072074: __ast_free (astmm.c:208) ==5732== by 0x80F8CFE: destroy (translate.c:145) ==5732== by 0x80F90AF: ast_translator_free_path (translate.c:250) ==5732== by 0x80813E5: free_translation (channel.c:1718) ==5732== by 0x8087825: ast_do_masquerade (channel.c:3653) ==5732== by 0x8081D13: ast_waitfor_nandfds (channel.c:1950) ==5732== by 0x80823E3: ast_waitfor_n (channel.c:2069) ==5732== by 0x80D6D89: bridge_p2p_loop (rtp.c:3159) ==5732== by 0x80D7A5F: ast_rtp_bridge (rtp.c:3387) ==5732== by 0x808A0F9: ast_channel_bridge (channel.c:4332) ==5732== ==5732== Invalid read of size 4 ==5732== at 0x80857F1: ast_write (channel.c:2923) ==5732== by 0x80893D3: ast_generic_bridge (channel.c:4141) ==5732== by 0x808A476: ast_channel_bridge (channel.c:4392) ==5732== by 0x421E120: ast_bridge_call (res_features.c:1412) ==5732== by 0x46739D1: ??? (app_dial.c:1701) ==5732== by 0x4673D04: ??? (app_dial.c:1755) ==5732== by 0x80BDF3A: pbx_exec (pbx.c:532) ==5732== by 0x80C13B9: pbx_extension_helper (pbx.c:1851) ==5732== by 0x80C24B4: ast_spawn_extension (pbx.c:2306) ==5732== by 0x80C29D0: __ast_pbx_run (pbx.c:2408) ==5732== by 0x80C3784: pbx_thread (pbx.c:2623) ==5732== by 0x80FF911: dummy_start (utils.c:852) ==5732== Address 0x57DB630 is 112 bytes inside a block of size 8,280 free'd ==5732== at 0x400501A: free (vg_replace_malloc.c:233) ==5732== by 0x8071CE2: __ast_free_region (astmm.c:174) ==5732== by 0x8072074: __ast_free (astmm.c:208) ==5732== by 0x80F8CFE: destroy (translate.c:145) ==5732== by 0x80F90AF: ast_translator_free_path (translate.c:250) ==5732== by 0x80813E5: free_translation (channel.c:1718) ==5732== by 0x8087825: ast_do_masquerade (channel.c:3653) ==5732== by 0x8081D13: ast_waitfor_nandfds (channel.c:1950) ==5732== by 0x80823E3: ast_waitfor_n (channel.c:2069) ==5732== by 0x80D6D89: bridge_p2p_loop (rtp.c:3159) ==5732== by 0x80D7A5F: ast_rtp_bridge (rtp.c:3387) ==5732== by 0x808A0F9: ast_channel_bridge (channel.c:4332) ==5732== ==5732== Invalid read of size 4 ==5732== at 0x45D6B12: ??? (chan_sip.c:3666) ==5732== by 0x8085BB2: ast_write (channel.c:2990) ==5732== by 0x80893D3: ast_generic_bridge (channel.c:4141) ==5732== by 0x808A476: ast_channel_bridge (channel.c:4392) ==5732== by 0x421E120: ast_bridge_call (res_features.c:1412) ==5732== by 0x46739D1: ??? (app_dial.c:1701) ==5732== by 0x4673D04: ??? (app_dial.c:1755) ==5732== by 0x80BDF3A: pbx_exec (pbx.c:532) ==5732== by 0x80C13B9: pbx_extension_helper (pbx.c:1851) ==5732== by 0x80C24B4: ast_spawn_extension (pbx.c:2306) ==5732== by 0x80C29D0: __ast_pbx_run (pbx.c:2408) ==5732== by 0x80C3784: pbx_thread (pbx.c:2623) ==5732== Address 0x57DB62C is 108 bytes inside a block of size 8,280 free'd ==5732== at 0x400501A: free (vg_replace_malloc.c:233) ==5732== by 0x8071CE2: __ast_free_region (astmm.c:174) ==5732== by 0x8072074: __ast_free (astmm.c:208) ==5732== by 0x80F8CFE: destroy (translate.c:145) ==5732== by 0x80F90AF: ast_translator_free_path (translate.c:250) ==5732== by 0x80813E5: free_translation (channel.c:1718) ==5732== by 0x8087825: ast_do_masquerade (channel.c:3653) ==5732== by 0x8081D13: ast_waitfor_nandfds (channel.c:1950) ==5732== by 0x80823E3: ast_waitfor_n (channel.c:2069) ==5732== by 0x80D6D89: bridge_p2p_loop (rtp.c:3159) ==5732== by 0x80D7A5F: ast_rtp_bridge (rtp.c:3387) ==5732== by 0x808A0F9: ast_channel_bridge (channel.c:4332) ==5732== ==5732== Invalid read of size 4 ==5732== at 0x45D6B60: ??? (chan_sip.c:3668) ==5732== by 0x8085BB2: ast_write (channel.c:2990) ==5732== by 0x80893D3: ast_generic_bridge (channel.c:4141) ==5732== by 0x808A476: ast_channel_bridge (channel.c:4392) ==5732== by 0x421E120: ast_bridge_call (res_features.c:1412) ==5732== by 0x46739D1: ??? (app_dial.c:1701) ==5732== by 0x4673D04: ??? (app_dial.c:1755) ==5732== by 0x80BDF3A: pbx_exec (pbx.c:532) ==5732== by 0x80C13B9: pbx_extension_helper (pbx.c:1851) ==5732== by 0x80C24B4: ast_spawn_extension (pbx.c:2306) ==5732== by 0x80C29D0: __ast_pbx_run (pbx.c:2408) ==5732== by 0x80C3784: pbx_thread (pbx.c:2623) ==5732== Address 0x57DB630 is 112 bytes inside a block of size 8,280 free'd ==5732== at 0x400501A: free (vg_replace_malloc.c:233) ==5732== by 0x8071CE2: __ast_free_region (astmm.c:174) ==5732== by 0x8072074: __ast_free (astmm.c:208) ==5732== by 0x80F8CFE: destroy (translate.c:145) ==5732== by 0x80F90AF: ast_translator_free_path (translate.c:250) ==5732== by 0x80813E5: free_translation (channel.c:1718) ==5732== by 0x8087825: ast_do_masquerade (channel.c:3653) ==5732== by 0x8081D13: ast_waitfor_nandfds (channel.c:1950) ==5732== by 0x80823E3: ast_waitfor_n (channel.c:2069) ==5732== by 0x80D6D89: bridge_p2p_loop (rtp.c:3159) ==5732== by 0x80D7A5F: ast_rtp_bridge (rtp.c:3387) ==5732== by 0x808A0F9: ast_channel_bridge (channel.c:4332) ==5732== ==5732== Invalid read of size 4 ==5732== at 0x80A4A95: ast_frame_free (frame.c:336) ==5732== by 0x80893FE: ast_generic_bridge (channel.c:4148) ==5732== by 0x808A476: ast_channel_bridge (channel.c:4392) ==5732== by 0x421E120: ast_bridge_call (res_features.c:1412) ==5732== by 0x46739D1: ??? (app_dial.c:1701) ==5732== by 0x4673D04: ??? (app_dial.c:1755) ==5732== by 0x80BDF3A: pbx_exec (pbx.c:532) ==5732== by 0x80C13B9: pbx_extension_helper (pbx.c:1851) ==5732== by 0x80C24B4: ast_spawn_extension (pbx.c:2306) ==5732== by 0x80C29D0: __ast_pbx_run (pbx.c:2408) ==5732== by 0x80C3784: pbx_thread (pbx.c:2623) ==5732== by 0x80FF911: dummy_start (utils.c:852) ==5732== Address 0x57DB63C is 124 bytes inside a block of size 8,280 free'd ==5732== at 0x400501A: free (vg_replace_malloc.c:233) ==5732== by 0x8071CE2: __ast_free_region (astmm.c:174) ==5732== by 0x8072074: __ast_free (astmm.c:208) ==5732== by 0x80F8CFE: destroy (translate.c:145) ==5732== by 0x80F90AF: ast_translator_free_path (translate.c:250) ==5732== by 0x80813E5: free_translation (channel.c:1718) ==5732== by 0x8087825: ast_do_masquerade (channel.c:3653) ==5732== by 0x8081D13: ast_waitfor_nandfds (channel.c:1950) ==5732== by 0x80823E3: ast_waitfor_n (channel.c:2069) ==5732== by 0x80D6D89: bridge_p2p_loop (rtp.c:3159) ==5732== by 0x80D7A5F: ast_rtp_bridge (rtp.c:3387) ==5732== by 0x808A0F9: ast_channel_bridge (channel.c:4332)