==24751== Memcheck, a memory error detector.
==24751== Copyright (C) 2002-2006, and GNU GPL'd, by Julian Seward et al.
==24751== Using LibVEX rev 1658, a library for dynamic binary translation.
==24751== Copyright (C) 2004-2006, and GNU GPL'd, by OpenWorks LLP.
==24751== Using valgrind-3.2.1, a dynamic binary instrumentation framework.
==24751== Copyright (C) 2000-2006, and GNU GPL'd, by Julian Seward et al.
==24751== For more details, rerun with: -v
==24751== 
==24751== My PID = 24751, parent PID = 24750.  Prog and args are:
==24751==    asterisk
==24751==    -U
==24751==    asterisk
==24751==    -G
==24751==    asterisk
==24751==    -vvvvdcg
==24751== 
==24751== Invalid read of size 1
==24751==    at 0x4E4BE1ED: _dl_close (in /lib/ld-2.5.so)
==24751==    by 0x4E60ACE3: dlclose_doit (in /lib/libdl-2.5.so)
==24751==    by 0x4E4B8C35: _dl_catch_error (in /lib/ld-2.5.so)
==24751==    by 0x4E60B2CB: _dlerror_run (in /lib/libdl-2.5.so)
==24751==    by 0x4E60AD19: dlclose (in /lib/libdl-2.5.so)
==24751==    by 0x80BF8BA: load_dynamic_module (loader.c:389)
==24751==    by 0x80C06A2: load_resource (loader.c:646)
==24751==    by 0x80C0EBD: load_modules (loader.c:847)
==24751==    by 0x807322B: main (asterisk.c:2957)
==24751==  Address 0x4077E0C is 516 bytes inside a block of size 645 free'd
==24751==    at 0x400501A: free (vg_replace_malloc.c:233)
==24751==    by 0x4E4BDD9C: _dl_close_worker (in /lib/ld-2.5.so)
==24751==    by 0x4E4BE216: _dl_close (in /lib/ld-2.5.so)
==24751==    by 0x4E60ACE3: dlclose_doit (in /lib/libdl-2.5.so)
==24751==    by 0x4E4B8C35: _dl_catch_error (in /lib/ld-2.5.so)
==24751==    by 0x4E60B2CB: _dlerror_run (in /lib/libdl-2.5.so)
==24751==    by 0x4E60AD19: dlclose (in /lib/libdl-2.5.so)
==24751==    by 0x80BF8BA: load_dynamic_module (loader.c:389)
==24751==    by 0x80C06A2: load_resource (loader.c:646)
==24751==    by 0x80C0EBD: load_modules (loader.c:847)
==24751==    by 0x807322B: main (asterisk.c:2957)
==24751== 
==24751== Invalid read of size 4
==24751==    at 0x4E4BE1F6: _dl_close (in /lib/ld-2.5.so)
==24751==    by 0x4E60ACE3: dlclose_doit (in /lib/libdl-2.5.so)
==24751==    by 0x4E4B8C35: _dl_catch_error (in /lib/ld-2.5.so)
==24751==    by 0x4E60B2CB: _dlerror_run (in /lib/libdl-2.5.so)
==24751==    by 0x4E60AD19: dlclose (in /lib/libdl-2.5.so)
==24751==    by 0x80BF8BA: load_dynamic_module (loader.c:389)
==24751==    by 0x80C06A2: load_resource (loader.c:646)
==24751==    by 0x80C0EBD: load_modules (loader.c:847)
==24751==    by 0x807322B: main (asterisk.c:2957)
==24751==  Address 0x4077D90 is 392 bytes inside a block of size 645 free'd
==24751==    at 0x400501A: free (vg_replace_malloc.c:233)
==24751==    by 0x4E4BDD9C: _dl_close_worker (in /lib/ld-2.5.so)
==24751==    by 0x4E4BE216: _dl_close (in /lib/ld-2.5.so)
==24751==    by 0x4E60ACE3: dlclose_doit (in /lib/libdl-2.5.so)
==24751==    by 0x4E4B8C35: _dl_catch_error (in /lib/ld-2.5.so)
==24751==    by 0x4E60B2CB: _dlerror_run (in /lib/libdl-2.5.so)
==24751==    by 0x4E60AD19: dlclose (in /lib/libdl-2.5.so)
==24751==    by 0x80BF8BA: load_dynamic_module (loader.c:389)
==24751==    by 0x80C06A2: load_resource (loader.c:646)
==24751==    by 0x80C0EBD: load_modules (loader.c:847)
==24751==    by 0x807322B: main (asterisk.c:2957)
==24751== 
==24751== Invalid read of size 4
==24751==    at 0x4E4BE22D: _dl_close (in /lib/ld-2.5.so)
==24751==    by 0x4E60ACE3: dlclose_doit (in /lib/libdl-2.5.so)
==24751==    by 0x4E4B8C35: _dl_catch_error (in /lib/ld-2.5.so)
==24751==    by 0x4E60B2CB: _dlerror_run (in /lib/libdl-2.5.so)
==24751==    by 0x4E60AD19: dlclose (in /lib/libdl-2.5.so)
==24751==    by 0x80BF8BA: load_dynamic_module (loader.c:389)
==24751==    by 0x80C06A2: load_resource (loader.c:646)
==24751==    by 0x80C0EBD: load_modules (loader.c:847)
==24751==    by 0x807322B: main (asterisk.c:2957)
==24751==  Address 0x4077C0C is 4 bytes inside a block of size 645 free'd
==24751==    at 0x400501A: free (vg_replace_malloc.c:233)
==24751==    by 0x4E4BDD9C: _dl_close_worker (in /lib/ld-2.5.so)
==24751==    by 0x4E4BE216: _dl_close (in /lib/ld-2.5.so)
==24751==    by 0x4E60ACE3: dlclose_doit (in /lib/libdl-2.5.so)
==24751==    by 0x4E4B8C35: _dl_catch_error (in /lib/ld-2.5.so)
==24751==    by 0x4E60B2CB: _dlerror_run (in /lib/libdl-2.5.so)
==24751==    by 0x4E60AD19: dlclose (in /lib/libdl-2.5.so)
==24751==    by 0x80BF8BA: load_dynamic_module (loader.c:389)
==24751==    by 0x80C06A2: load_resource (loader.c:646)
==24751==    by 0x80C0EBD: load_modules (loader.c:847)
==24751==    by 0x807322B: main (asterisk.c:2957)
==24751== 
==24751== Invalid read of size 1
==24751==    at 0x4006298: strlen (mc_replace_strmem.c:247)
==24751==    by 0x4E4B8D31: _dl_signal_error (in /lib/ld-2.5.so)
==24751==    by 0x4E4BE242: _dl_close (in /lib/ld-2.5.so)
==24751==    by 0x4E60ACE3: dlclose_doit (in /lib/libdl-2.5.so)
==24751==    by 0x4E4B8C35: _dl_catch_error (in /lib/ld-2.5.so)
==24751==    by 0x4E60B2CB: _dlerror_run (in /lib/libdl-2.5.so)
==24751==    by 0x4E60AD19: dlclose (in /lib/libdl-2.5.so)
==24751==    by 0x80BF8BA: load_dynamic_module (loader.c:389)
==24751==    by 0x80C06A2: load_resource (loader.c:646)
==24751==    by 0x80C0EBD: load_modules (loader.c:847)
==24751==    by 0x807322B: main (asterisk.c:2957)
==24751==  Address 0x4077BA8 is 0 bytes inside a block of size 45 free'd
==24751==    at 0x400501A: free (vg_replace_malloc.c:233)
==24751==    by 0x4E4BDD15: _dl_close_worker (in /lib/ld-2.5.so)
==24751==    by 0x4E4BE216: _dl_close (in /lib/ld-2.5.so)
==24751==    by 0x4E60ACE3: dlclose_doit (in /lib/libdl-2.5.so)
==24751==    by 0x4E4B8C35: _dl_catch_error (in /lib/ld-2.5.so)
==24751==    by 0x4E60B2CB: _dlerror_run (in /lib/libdl-2.5.so)
==24751==    by 0x4E60AD19: dlclose (in /lib/libdl-2.5.so)
==24751==    by 0x80BF8BA: load_dynamic_module (loader.c:389)
==24751==    by 0x80C06A2: load_resource (loader.c:646)
==24751==    by 0x80C0EBD: load_modules (loader.c:847)
==24751==    by 0x807322B: main (asterisk.c:2957)
==24751== 
==24751== Invalid read of size 1
==24751==    at 0x40062A3: strlen (mc_replace_strmem.c:247)
==24751==    by 0x4E4B8D31: _dl_signal_error (in /lib/ld-2.5.so)
==24751==    by 0x4E4BE242: _dl_close (in /lib/ld-2.5.so)
==24751==    by 0x4E60ACE3: dlclose_doit (in /lib/libdl-2.5.so)
==24751==    by 0x4E4B8C35: _dl_catch_error (in /lib/ld-2.5.so)
==24751==    by 0x4E60B2CB: _dlerror_run (in /lib/libdl-2.5.so)
==24751==    by 0x4E60AD19: dlclose (in /lib/libdl-2.5.so)
==24751==    by 0x80BF8BA: load_dynamic_module (loader.c:389)
==24751==    by 0x80C06A2: load_resource (loader.c:646)
==24751==    by 0x80C0EBD: load_modules (loader.c:847)
==24751==    by 0x807322B: main (asterisk.c:2957)
==24751==  Address 0x4077BA9 is 1 bytes inside a block of size 45 free'd
==24751==    at 0x400501A: free (vg_replace_malloc.c:233)
==24751==    by 0x4E4BDD15: _dl_close_worker (in /lib/ld-2.5.so)
==24751==    by 0x4E4BE216: _dl_close (in /lib/ld-2.5.so)
==24751==    by 0x4E60ACE3: dlclose_doit (in /lib/libdl-2.5.so)
==24751==    by 0x4E4B8C35: _dl_catch_error (in /lib/ld-2.5.so)
==24751==    by 0x4E60B2CB: _dlerror_run (in /lib/libdl-2.5.so)
==24751==    by 0x4E60AD19: dlclose (in /lib/libdl-2.5.so)
==24751==    by 0x80BF8BA: load_dynamic_module (loader.c:389)
==24751==    by 0x80C06A2: load_resource (loader.c:646)
==24751==    by 0x80C0EBD: load_modules (loader.c:847)
==24751==    by 0x807322B: main (asterisk.c:2957)
==24751== 
==24751== Invalid read of size 1
==24751==    at 0x4E4C0B05: memcpy (in /lib/ld-2.5.so)
==24751==    by 0x4E4BE242: _dl_close (in /lib/ld-2.5.so)
==24751==    by 0x4E60ACE3: dlclose_doit (in /lib/libdl-2.5.so)
==24751==    by 0x4E4B8C35: _dl_catch_error (in /lib/ld-2.5.so)
==24751==    by 0x4E60B2CB: _dlerror_run (in /lib/libdl-2.5.so)
==24751==    by 0x4E60AD19: dlclose (in /lib/libdl-2.5.so)
==24751==    by 0x80BF8BA: load_dynamic_module (loader.c:389)
==24751==    by 0x80C06A2: load_resource (loader.c:646)
==24751==    by 0x80C0EBD: load_modules (loader.c:847)
==24751==    by 0x807322B: main (asterisk.c:2957)
==24751==  Address 0x4077BA8 is 0 bytes inside a block of size 45 free'd
==24751==    at 0x400501A: free (vg_replace_malloc.c:233)
==24751==    by 0x4E4BDD15: _dl_close_worker (in /lib/ld-2.5.so)
==24751==    by 0x4E4BE216: _dl_close (in /lib/ld-2.5.so)
==24751==    by 0x4E60ACE3: dlclose_doit (in /lib/libdl-2.5.so)
==24751==    by 0x4E4B8C35: _dl_catch_error (in /lib/ld-2.5.so)
==24751==    by 0x4E60B2CB: _dlerror_run (in /lib/libdl-2.5.so)
==24751==    by 0x4E60AD19: dlclose (in /lib/libdl-2.5.so)
==24751==    by 0x80BF8BA: load_dynamic_module (loader.c:389)
==24751==    by 0x80C06A2: load_resource (loader.c:646)
==24751==    by 0x80C0EBD: load_modules (loader.c:847)
==24751==    by 0x807322B: main (asterisk.c:2957)
==24751== 
==24751== Invalid read of size 4
==24751==    at 0x4E4C0B0C: memcpy (in /lib/ld-2.5.so)
==24751==    by 0x4E4BE242: _dl_close (in /lib/ld-2.5.so)
==24751==    by 0x4E60ACE3: dlclose_doit (in /lib/libdl-2.5.so)
==24751==    by 0x4E4B8C35: _dl_catch_error (in /lib/ld-2.5.so)
==24751==    by 0x4E60B2CB: _dlerror_run (in /lib/libdl-2.5.so)
==24751==    by 0x4E60AD19: dlclose (in /lib/libdl-2.5.so)
==24751==    by 0x80BF8BA: load_dynamic_module (loader.c:389)
==24751==    by 0x80C06A2: load_resource (loader.c:646)
==24751==    by 0x80C0EBD: load_modules (loader.c:847)
==24751==    by 0x807322B: main (asterisk.c:2957)
==24751==  Address 0x4077BA9 is 1 bytes inside a block of size 45 free'd
==24751==    at 0x400501A: free (vg_replace_malloc.c:233)
==24751==    by 0x4E4BDD15: _dl_close_worker (in /lib/ld-2.5.so)
==24751==    by 0x4E4BE216: _dl_close (in /lib/ld-2.5.so)
==24751==    by 0x4E60ACE3: dlclose_doit (in /lib/libdl-2.5.so)
==24751==    by 0x4E4B8C35: _dl_catch_error (in /lib/ld-2.5.so)
==24751==    by 0x4E60B2CB: _dlerror_run (in /lib/libdl-2.5.so)
==24751==    by 0x4E60AD19: dlclose (in /lib/libdl-2.5.so)
==24751==    by 0x80BF8BA: load_dynamic_module (loader.c:389)
==24751==    by 0x80C06A2: load_resource (loader.c:646)
==24751==    by 0x80C0EBD: load_modules (loader.c:847)
==24751==    by 0x807322B: main (asterisk.c:2957)
==24751== 
==24751== Invalid read of size 2
==24751==    at 0x4E4C0B0A: memcpy (in /lib/ld-2.5.so)
==24751==    by 0x4E4BE242: _dl_close (in /lib/ld-2.5.so)
==24751==    by 0x4E60ACE3: dlclose_doit (in /lib/libdl-2.5.so)
==24751==    by 0x4E4B8C35: _dl_catch_error (in /lib/ld-2.5.so)
==24751==    by 0x4E60B2CB: _dlerror_run (in /lib/libdl-2.5.so)
==24751==    by 0x4E60AD19: dlclose (in /lib/libdl-2.5.so)
==24751==    by 0x80BF8BA: load_dynamic_module (loader.c:389)
==24751==    by 0x80C06A2: load_resource (loader.c:646)
==24751==    by 0x80C0EBD: load_modules (loader.c:847)
==24751==    by 0x807322B: main (asterisk.c:2957)
==24751==  Address 0x40793B1 is 1 bytes inside a block of size 39 free'd
==24751==    at 0x400501A: free (vg_replace_malloc.c:233)
==24751==    by 0x4E4BDD15: _dl_close_worker (in /lib/ld-2.5.so)
==24751==    by 0x4E4BE216: _dl_close (in /lib/ld-2.5.so)
==24751==    by 0x4E60ACE3: dlclose_doit (in /lib/libdl-2.5.so)
==24751==    by 0x4E4B8C35: _dl_catch_error (in /lib/ld-2.5.so)
==24751==    by 0x4E60B2CB: _dlerror_run (in /lib/libdl-2.5.so)
==24751==    by 0x4E60AD19: dlclose (in /lib/libdl-2.5.so)
==24751==    by 0x80BF8BA: load_dynamic_module (loader.c:389)
==24751==    by 0x80C06A2: load_resource (loader.c:646)
==24751==    by 0x80C0EBD: load_modules (loader.c:847)
==24751==    by 0x807322B: main (asterisk.c:2957)
==24751== 
==24751== Thread 30:
==24751== Syscall param write(buf) points to uninitialised byte(s)
==24751==    at 0x4E644D9B: (within /lib/libpthread-2.5.so)
==24751==    by 0x813CE9B: __mpool_sync (mpool.c:308)
==24751==    by 0x8138300: __bt_sync (bt_close.c:146)
==24751==    by 0x809F97E: ast_db_put (db.c:165)
==24751==    by 0x631CC83: ??? (func_db.c:98)
==24751==    by 0x80D477A: ast_func_write (pbx.c:1557)
==24751==    by 0x80E0491: pbx_builtin_setvar_helper (pbx.c:5857)
==24751==    by 0x80E091A: pbx_builtin_setvar (pbx.c:5930)
==24751==    by 0x80D179D: pbx_exec (pbx.c:532)
==24751==    by 0x80D53D2: pbx_extension_helper (pbx.c:1851)
==24751==    by 0x80D674A: ast_spawn_extension (pbx.c:2306)
==24751==    by 0x659E2D4: ??? (app_macro.c:308)
==24751==  Address 0x46D87A6 is 222 bytes inside a block of size 4,232 alloc'd
==24751==    at 0x4005400: malloc (vg_replace_malloc.c:149)
==24751==    by 0x8074152: __ast_alloc_region (astmm.c:102)
==24751==    by 0x80743AB: __ast_malloc (astmm.c:203)
==24751==    by 0x813D04B: mpool_bkt (mpool.c:383)
==24751==    by 0x813CBBE: __mpool_get (mpool.c:210)
==24751==    by 0x813A528: __bt_seqset (bt_seq.c:182)
==24751==    by 0x813A3CE: __bt_seq (bt_seq.c:110)
==24751==    by 0x809EEEE: ast_db_deltree (db.c:129)
==24751==    by 0x47EB05D: iax_provision_reload (iax2-provision.c:537)
==24751==    by 0x47E5FED: ??? (chan_iax2.c:10890)
==24751==    by 0x80C077D: load_resource (loader.c:672)
==24751==    by 0x80C0FF3: load_modules (loader.c:866)
==24751== 
==24751== Thread 34:
==24751== Invalid read of size 4
==24751==    at 0x80B2069: ast_frame_free (frame.c:340)
==24751==    by 0x80915A8: ast_generic_bridge (channel.c:3813)
==24751==    by 0x80924BE: ast_channel_bridge (channel.c:4057)
==24751==    by 0x4203185: ast_bridge_call (res_features.c:1420)
==24751==    by 0x4688EA1: ??? (app_dial.c:1706)
==24751==    by 0x4689AA0: ??? (app_dial.c:1760)
==24751==    by 0x80D179D: pbx_exec (pbx.c:532)
==24751==    by 0x80D53D2: pbx_extension_helper (pbx.c:1851)
==24751==    by 0x80D674A: ast_spawn_extension (pbx.c:2306)
==24751==    by 0x80D6CC8: __ast_pbx_run (pbx.c:2408)
==24751==    by 0x80D7A9D: pbx_thread (pbx.c:2623)
==24751==    by 0x81191A4: dummy_start (utils.c:852)
==24751==  Address 0x73CBE34 is 124 bytes inside a block of size 33,340 free'd
==24751==    at 0x400501A: free (vg_replace_malloc.c:233)
==24751==    by 0x807388F: __ast_free_region (astmm.c:174)
==24751==    by 0x80743D3: __ast_free (astmm.c:208)
==24751==    by 0x810FCEE: destroy (translate.c:157)
==24751==    by 0x8113038: ast_translate_frame_freed (translate.c:977)
==24751==    by 0x80B2065: ast_frame_free (frame.c:338)
==24751==    by 0x80915A8: ast_generic_bridge (channel.c:3813)
==24751==    by 0x80924BE: ast_channel_bridge (channel.c:4057)
==24751==    by 0x4203185: ast_bridge_call (res_features.c:1420)
==24751==    by 0x4688EA1: ??? (app_dial.c:1706)
==24751==    by 0x4689AA0: ??? (app_dial.c:1760)
==24751==    by 0x80D179D: pbx_exec (pbx.c:532)
==24751== 
==24751== Thread 10:
==24751== Invalid read of size 1
==24751==    at 0x4006278: strlen (mc_replace_strmem.c:246)
==24751==    by 0x4E5071FE: vfprintf (in /lib/libc-2.5.so)
==24751==    by 0x4E525F63: vsnprintf (in /lib/libc-2.5.so)
==24751==    by 0x8119F86: ast_dynamic_str_thread_build_va (utils.c:1294)
==24751==    by 0x80C3DB0: ast_log (logger.c:807)
==24751==    by 0x47B4522: ??? (lock.h:340)
==24751==    by 0x47B64D6: ??? (chan_iax2.c:1347)
==24751==    by 0x47CFF39: ??? (chan_iax2.c:6959)
==24751==    by 0x47D8E1B: ??? (chan_iax2.c:8353)
==24751==    by 0x81191A4: dummy_start (utils.c:852)
==24751==    by 0x4E63E45A: start_thread (in /lib/libpthread-2.5.so)
==24751==    by 0x4E59623D: clone (in /lib/libc-2.5.so)
==24751==  Address 0x1 is not stack'd, malloc'd or (recently) free'd
==24751== 
==24751== Process terminating with default action of signal 11 (SIGSEGV): dumping core
==24751==  Access not within mapped region at address 0x1
==24751==    at 0x4006278: strlen (mc_replace_strmem.c:246)
==24751==    by 0x4E5071FE: vfprintf (in /lib/libc-2.5.so)
==24751==    by 0x4E525F63: vsnprintf (in /lib/libc-2.5.so)
==24751==    by 0x8119F86: ast_dynamic_str_thread_build_va (utils.c:1294)
==24751==    by 0x80C3DB0: ast_log (logger.c:807)
==24751==    by 0x47B4522: ??? (lock.h:340)
==24751==    by 0x47B64D6: ??? (chan_iax2.c:1347)
==24751==    by 0x47CFF39: ??? (chan_iax2.c:6959)
==24751==    by 0x47D8E1B: ??? (chan_iax2.c:8353)
==24751==    by 0x81191A4: dummy_start (utils.c:852)
==24751==    by 0x4E63E45A: start_thread (in /lib/libpthread-2.5.so)
==24751==    by 0x4E59623D: clone (in /lib/libc-2.5.so)
==24751== 
==24751== ERROR SUMMARY: 7554 errors from 11 contexts (suppressed: 693 from 1)
==24751== malloc/free: in use at exit: 5,021,934 bytes in 11,075 blocks.
==24751== malloc/free: 1,545,210 allocs, 1,534,135 frees, 443,806,972 bytes allocated.
==24751== For counts of detected errors, rerun with: -v
==24751== searching for pointers to 11,075 not-freed blocks.
==24751== checked 38,875,636 bytes.
==24751== 
==24751== LEAK SUMMARY:
==24751==    definitely lost: 2,531 bytes in 46 blocks.
==24751==      possibly lost: 5,032 bytes in 37 blocks.
==24751==    still reachable: 5,014,371 bytes in 10,992 blocks.
==24751==         suppressed: 0 bytes in 0 blocks.
==24751== Use --leak-check=full to see details of leaked memory.