==31589== Memcheck, a memory error detector. ==31589== Copyright (C) 2002-2006, and GNU GPL'd, by Julian Seward et al. ==31589== Using LibVEX rev 1658, a library for dynamic binary translation. ==31589== Copyright (C) 2004-2006, and GNU GPL'd, by OpenWorks LLP. ==31589== Using valgrind-3.2.1, a dynamic binary instrumentation framework. ==31589== Copyright (C) 2000-2006, and GNU GPL'd, by Julian Seward et al. ==31589== For more details, rerun with: -v ==31589== ==31589== My PID = 31589, parent PID = 31588. Prog and args are: ==31589== asterisk ==31589== -U ==31589== asterisk ==31589== -G ==31589== asterisk ==31589== -vvvvdcg ==31589== ==31589== Invalid read of size 1 ==31589== at 0x4E4BE1ED: _dl_close (in /lib/ld-2.5.so) ==31589== by 0x4E60ACE3: dlclose_doit (in /lib/libdl-2.5.so) ==31589== by 0x4E4B8C35: _dl_catch_error (in /lib/ld-2.5.so) ==31589== by 0x4E60B2CB: _dlerror_run (in /lib/libdl-2.5.so) ==31589== by 0x4E60AD19: dlclose (in /lib/libdl-2.5.so) ==31589== by 0x80BF8BA: load_dynamic_module (loader.c:389) ==31589== by 0x80C06A2: load_resource (loader.c:646) ==31589== by 0x80C0EBD: load_modules (loader.c:847) ==31589== by 0x807322B: main (asterisk.c:2957) ==31589== Address 0x40786E4 is 516 bytes inside a block of size 645 free'd ==31589== at 0x400501A: free (vg_replace_malloc.c:233) ==31589== by 0x4E4BDD9C: _dl_close_worker (in /lib/ld-2.5.so) ==31589== by 0x4E4BE216: _dl_close (in /lib/ld-2.5.so) ==31589== by 0x4E60ACE3: dlclose_doit (in /lib/libdl-2.5.so) ==31589== by 0x4E4B8C35: _dl_catch_error (in /lib/ld-2.5.so) ==31589== by 0x4E60B2CB: _dlerror_run (in /lib/libdl-2.5.so) ==31589== by 0x4E60AD19: dlclose (in /lib/libdl-2.5.so) ==31589== by 0x80BF8BA: load_dynamic_module (loader.c:389) ==31589== by 0x80C06A2: load_resource (loader.c:646) ==31589== by 0x80C0EBD: load_modules (loader.c:847) ==31589== by 0x807322B: main (asterisk.c:2957) ==31589== ==31589== Invalid read of size 4 ==31589== at 0x4E4BE1F6: _dl_close (in /lib/ld-2.5.so) ==31589== by 0x4E60ACE3: dlclose_doit (in /lib/libdl-2.5.so) ==31589== by 0x4E4B8C35: _dl_catch_error (in /lib/ld-2.5.so) ==31589== by 0x4E60B2CB: _dlerror_run (in /lib/libdl-2.5.so) ==31589== by 0x4E60AD19: dlclose (in /lib/libdl-2.5.so) ==31589== by 0x80BF8BA: load_dynamic_module (loader.c:389) ==31589== by 0x80C06A2: load_resource (loader.c:646) ==31589== by 0x80C0EBD: load_modules (loader.c:847) ==31589== by 0x807322B: main (asterisk.c:2957) ==31589== Address 0x4078668 is 392 bytes inside a block of size 645 free'd ==31589== at 0x400501A: free (vg_replace_malloc.c:233) ==31589== by 0x4E4BDD9C: _dl_close_worker (in /lib/ld-2.5.so) ==31589== by 0x4E4BE216: _dl_close (in /lib/ld-2.5.so) ==31589== by 0x4E60ACE3: dlclose_doit (in /lib/libdl-2.5.so) ==31589== by 0x4E4B8C35: _dl_catch_error (in /lib/ld-2.5.so) ==31589== by 0x4E60B2CB: _dlerror_run (in /lib/libdl-2.5.so) ==31589== by 0x4E60AD19: dlclose (in /lib/libdl-2.5.so) ==31589== by 0x80BF8BA: load_dynamic_module (loader.c:389) ==31589== by 0x80C06A2: load_resource (loader.c:646) ==31589== by 0x80C0EBD: load_modules (loader.c:847) ==31589== by 0x807322B: main (asterisk.c:2957) ==31589== ==31589== Invalid read of size 4 ==31589== at 0x4E4BE22D: _dl_close (in /lib/ld-2.5.so) ==31589== by 0x4E60ACE3: dlclose_doit (in /lib/libdl-2.5.so) ==31589== by 0x4E4B8C35: _dl_catch_error (in /lib/ld-2.5.so) ==31589== by 0x4E60B2CB: _dlerror_run (in /lib/libdl-2.5.so) ==31589== by 0x4E60AD19: dlclose (in /lib/libdl-2.5.so) ==31589== by 0x80BF8BA: load_dynamic_module (loader.c:389) ==31589== by 0x80C06A2: load_resource (loader.c:646) ==31589== by 0x80C0EBD: load_modules (loader.c:847) ==31589== by 0x807322B: main (asterisk.c:2957) ==31589== Address 0x40784E4 is 4 bytes inside a block of size 645 free'd ==31589== at 0x400501A: free (vg_replace_malloc.c:233) ==31589== by 0x4E4BDD9C: _dl_close_worker (in /lib/ld-2.5.so) ==31589== by 0x4E4BE216: _dl_close (in /lib/ld-2.5.so) ==31589== by 0x4E60ACE3: dlclose_doit (in /lib/libdl-2.5.so) ==31589== by 0x4E4B8C35: _dl_catch_error (in /lib/ld-2.5.so) ==31589== by 0x4E60B2CB: _dlerror_run (in /lib/libdl-2.5.so) ==31589== by 0x4E60AD19: dlclose (in /lib/libdl-2.5.so) ==31589== by 0x80BF8BA: load_dynamic_module (loader.c:389) ==31589== by 0x80C06A2: load_resource (loader.c:646) ==31589== by 0x80C0EBD: load_modules (loader.c:847) ==31589== by 0x807322B: main (asterisk.c:2957) ==31589== ==31589== Invalid read of size 1 ==31589== at 0x4006298: strlen (mc_replace_strmem.c:247) ==31589== by 0x4E4B8D31: _dl_signal_error (in /lib/ld-2.5.so) ==31589== by 0x4E4BE242: _dl_close (in /lib/ld-2.5.so) ==31589== by 0x4E60ACE3: dlclose_doit (in /lib/libdl-2.5.so) ==31589== by 0x4E4B8C35: _dl_catch_error (in /lib/ld-2.5.so) ==31589== by 0x4E60B2CB: _dlerror_run (in /lib/libdl-2.5.so) ==31589== by 0x4E60AD19: dlclose (in /lib/libdl-2.5.so) ==31589== by 0x80BF8BA: load_dynamic_module (loader.c:389) ==31589== by 0x80C06A2: load_resource (loader.c:646) ==31589== by 0x80C0EBD: load_modules (loader.c:847) ==31589== by 0x807322B: main (asterisk.c:2957) ==31589== Address 0x4078480 is 0 bytes inside a block of size 45 free'd ==31589== at 0x400501A: free (vg_replace_malloc.c:233) ==31589== by 0x4E4BDD15: _dl_close_worker (in /lib/ld-2.5.so) ==31589== by 0x4E4BE216: _dl_close (in /lib/ld-2.5.so) ==31589== by 0x4E60ACE3: dlclose_doit (in /lib/libdl-2.5.so) ==31589== by 0x4E4B8C35: _dl_catch_error (in /lib/ld-2.5.so) ==31589== by 0x4E60B2CB: _dlerror_run (in /lib/libdl-2.5.so) ==31589== by 0x4E60AD19: dlclose (in /lib/libdl-2.5.so) ==31589== by 0x80BF8BA: load_dynamic_module (loader.c:389) ==31589== by 0x80C06A2: load_resource (loader.c:646) ==31589== by 0x80C0EBD: load_modules (loader.c:847) ==31589== by 0x807322B: main (asterisk.c:2957) ==31589== ==31589== Invalid read of size 1 ==31589== at 0x40062A3: strlen (mc_replace_strmem.c:247) ==31589== by 0x4E4B8D31: _dl_signal_error (in /lib/ld-2.5.so) ==31589== by 0x4E4BE242: _dl_close (in /lib/ld-2.5.so) ==31589== by 0x4E60ACE3: dlclose_doit (in /lib/libdl-2.5.so) ==31589== by 0x4E4B8C35: _dl_catch_error (in /lib/ld-2.5.so) ==31589== by 0x4E60B2CB: _dlerror_run (in /lib/libdl-2.5.so) ==31589== by 0x4E60AD19: dlclose (in /lib/libdl-2.5.so) ==31589== by 0x80BF8BA: load_dynamic_module (loader.c:389) ==31589== by 0x80C06A2: load_resource (loader.c:646) ==31589== by 0x80C0EBD: load_modules (loader.c:847) ==31589== by 0x807322B: main (asterisk.c:2957) ==31589== Address 0x4078481 is 1 bytes inside a block of size 45 free'd ==31589== at 0x400501A: free (vg_replace_malloc.c:233) ==31589== by 0x4E4BDD15: _dl_close_worker (in /lib/ld-2.5.so) ==31589== by 0x4E4BE216: _dl_close (in /lib/ld-2.5.so) ==31589== by 0x4E60ACE3: dlclose_doit (in /lib/libdl-2.5.so) ==31589== by 0x4E4B8C35: _dl_catch_error (in /lib/ld-2.5.so) ==31589== by 0x4E60B2CB: _dlerror_run (in /lib/libdl-2.5.so) ==31589== by 0x4E60AD19: dlclose (in /lib/libdl-2.5.so) ==31589== by 0x80BF8BA: load_dynamic_module (loader.c:389) ==31589== by 0x80C06A2: load_resource (loader.c:646) ==31589== by 0x80C0EBD: load_modules (loader.c:847) ==31589== by 0x807322B: main (asterisk.c:2957) ==31589== ==31589== Invalid read of size 1 ==31589== at 0x4E4C0B05: memcpy (in /lib/ld-2.5.so) ==31589== by 0x4E4BE242: _dl_close (in /lib/ld-2.5.so) ==31589== by 0x4E60ACE3: dlclose_doit (in /lib/libdl-2.5.so) ==31589== by 0x4E4B8C35: _dl_catch_error (in /lib/ld-2.5.so) ==31589== by 0x4E60B2CB: _dlerror_run (in /lib/libdl-2.5.so) ==31589== by 0x4E60AD19: dlclose (in /lib/libdl-2.5.so) ==31589== by 0x80BF8BA: load_dynamic_module (loader.c:389) ==31589== by 0x80C06A2: load_resource (loader.c:646) ==31589== by 0x80C0EBD: load_modules (loader.c:847) ==31589== by 0x807322B: main (asterisk.c:2957) ==31589== Address 0x4078480 is 0 bytes inside a block of size 45 free'd ==31589== at 0x400501A: free (vg_replace_malloc.c:233) ==31589== by 0x4E4BDD15: _dl_close_worker (in /lib/ld-2.5.so) ==31589== by 0x4E4BE216: _dl_close (in /lib/ld-2.5.so) ==31589== by 0x4E60ACE3: dlclose_doit (in /lib/libdl-2.5.so) ==31589== by 0x4E4B8C35: _dl_catch_error (in /lib/ld-2.5.so) ==31589== by 0x4E60B2CB: _dlerror_run (in /lib/libdl-2.5.so) ==31589== by 0x4E60AD19: dlclose (in /lib/libdl-2.5.so) ==31589== by 0x80BF8BA: load_dynamic_module (loader.c:389) ==31589== by 0x80C06A2: load_resource (loader.c:646) ==31589== by 0x80C0EBD: load_modules (loader.c:847) ==31589== by 0x807322B: main (asterisk.c:2957) ==31589== ==31589== Invalid read of size 4 ==31589== at 0x4E4C0B0C: memcpy (in /lib/ld-2.5.so) ==31589== by 0x4E4BE242: _dl_close (in /lib/ld-2.5.so) ==31589== by 0x4E60ACE3: dlclose_doit (in /lib/libdl-2.5.so) ==31589== by 0x4E4B8C35: _dl_catch_error (in /lib/ld-2.5.so) ==31589== by 0x4E60B2CB: _dlerror_run (in /lib/libdl-2.5.so) ==31589== by 0x4E60AD19: dlclose (in /lib/libdl-2.5.so) ==31589== by 0x80BF8BA: load_dynamic_module (loader.c:389) ==31589== by 0x80C06A2: load_resource (loader.c:646) ==31589== by 0x80C0EBD: load_modules (loader.c:847) ==31589== by 0x807322B: main (asterisk.c:2957) ==31589== Address 0x4078481 is 1 bytes inside a block of size 45 free'd ==31589== at 0x400501A: free (vg_replace_malloc.c:233) ==31589== by 0x4E4BDD15: _dl_close_worker (in /lib/ld-2.5.so) ==31589== by 0x4E4BE216: _dl_close (in /lib/ld-2.5.so) ==31589== by 0x4E60ACE3: dlclose_doit (in /lib/libdl-2.5.so) ==31589== by 0x4E4B8C35: _dl_catch_error (in /lib/ld-2.5.so) ==31589== by 0x4E60B2CB: _dlerror_run (in /lib/libdl-2.5.so) ==31589== by 0x4E60AD19: dlclose (in /lib/libdl-2.5.so) ==31589== by 0x80BF8BA: load_dynamic_module (loader.c:389) ==31589== by 0x80C06A2: load_resource (loader.c:646) ==31589== by 0x80C0EBD: load_modules (loader.c:847) ==31589== by 0x807322B: main (asterisk.c:2957) ==31589== ==31589== Invalid read of size 2 ==31589== at 0x4E4C0B0A: memcpy (in /lib/ld-2.5.so) ==31589== by 0x4E4BE242: _dl_close (in /lib/ld-2.5.so) ==31589== by 0x4E60ACE3: dlclose_doit (in /lib/libdl-2.5.so) ==31589== by 0x4E4B8C35: _dl_catch_error (in /lib/ld-2.5.so) ==31589== by 0x4E60B2CB: _dlerror_run (in /lib/libdl-2.5.so) ==31589== by 0x4E60AD19: dlclose (in /lib/libdl-2.5.so) ==31589== by 0x80BF8BA: load_dynamic_module (loader.c:389) ==31589== by 0x80C06A2: load_resource (loader.c:646) ==31589== by 0x80C0EBD: load_modules (loader.c:847) ==31589== by 0x807322B: main (asterisk.c:2957) ==31589== Address 0x4079C89 is 1 bytes inside a block of size 39 free'd ==31589== at 0x400501A: free (vg_replace_malloc.c:233) ==31589== by 0x4E4BDD15: _dl_close_worker (in /lib/ld-2.5.so) ==31589== by 0x4E4BE216: _dl_close (in /lib/ld-2.5.so) ==31589== by 0x4E60ACE3: dlclose_doit (in /lib/libdl-2.5.so) ==31589== by 0x4E4B8C35: _dl_catch_error (in /lib/ld-2.5.so) ==31589== by 0x4E60B2CB: _dlerror_run (in /lib/libdl-2.5.so) ==31589== by 0x4E60AD19: dlclose (in /lib/libdl-2.5.so) ==31589== by 0x80BF8BA: load_dynamic_module (loader.c:389) ==31589== by 0x80C06A2: load_resource (loader.c:646) ==31589== by 0x80C0EBD: load_modules (loader.c:847) ==31589== by 0x807322B: main (asterisk.c:2957) ==31589== ==31589== Thread 29: ==31589== Syscall param write(buf) points to uninitialised byte(s) ==31589== at 0x4E644D9B: (within /lib/libpthread-2.5.so) ==31589== by 0x813CE9B: __mpool_sync (mpool.c:308) ==31589== by 0x8138300: __bt_sync (bt_close.c:146) ==31589== by 0x809F97E: ast_db_put (db.c:165) ==31589== by 0x6358C83: ??? (func_db.c:98) ==31589== by 0x80D477A: ast_func_write (pbx.c:1557) ==31589== by 0x80E0491: pbx_builtin_setvar_helper (pbx.c:5857) ==31589== by 0x80E091A: pbx_builtin_setvar (pbx.c:5930) ==31589== by 0x80D179D: pbx_exec (pbx.c:532) ==31589== by 0x80D53D2: pbx_extension_helper (pbx.c:1851) ==31589== by 0x80D674A: ast_spawn_extension (pbx.c:2306) ==31589== by 0x80D6CC8: __ast_pbx_run (pbx.c:2408) ==31589== Address 0x46B4B18 is 224 bytes inside a block of size 4,232 alloc'd ==31589== at 0x4005400: malloc (vg_replace_malloc.c:149) ==31589== by 0x8074152: __ast_alloc_region (astmm.c:102) ==31589== by 0x80743AB: __ast_malloc (astmm.c:203) ==31589== by 0x813D04B: mpool_bkt (mpool.c:383) ==31589== by 0x813CBBE: __mpool_get (mpool.c:210) ==31589== by 0x8139F57: __bt_search (bt_search.c:78) ==31589== by 0x814015A: __bt_get (bt_get.c:87) ==31589== by 0x809FB7D: ast_db_get (db.c:191) ==31589== by 0x47CB30F: ??? (chan_iax2.c:5892) ==31589== by 0x47E317E: ??? (chan_iax2.c:9931) ==31589== by 0x47E5DD1: ??? (chan_iax2.c:10859) ==31589== by 0x80C077D: load_resource (loader.c:672) ==31589== ==31589== Thread 4: ==31589== Invalid read of size 1 ==31589== at 0x4006278: strlen (mc_replace_strmem.c:246) ==31589== by 0x4E5071FE: vfprintf (in /lib/libc-2.5.so) ==31589== by 0x4E525F63: vsnprintf (in /lib/libc-2.5.so) ==31589== by 0x8119F86: ast_dynamic_str_thread_build_va (utils.c:1294) ==31589== by 0x80C3DB0: ast_log (logger.c:807) ==31589== by 0x66FF4BF: ??? (lock.h:340) ==31589== by 0x670873A: ??? (chan_agent.c:2544) ==31589== by 0x80A1591: ast_device_state (devicestate.c:170) ==31589== by 0x80A1FC1: do_state_change (devicestate.c:285) ==31589== by 0x80A23E2: do_devstate_changes (devicestate.c:369) ==31589== by 0x81191A4: dummy_start (utils.c:852) ==31589== by 0x4E63E45A: start_thread (in /lib/libpthread-2.5.so) ==31589== Address 0x1 is not stack'd, malloc'd or (recently) free'd ==31589== ==31589== Process terminating with default action of signal 11 (SIGSEGV): dumping core ==31589== Access not within mapped region at address 0x1 ==31589== at 0x4006278: strlen (mc_replace_strmem.c:246) ==31589== by 0x4E5071FE: vfprintf (in /lib/libc-2.5.so) ==31589== by 0x4E525F63: vsnprintf (in /lib/libc-2.5.so) ==31589== by 0x8119F86: ast_dynamic_str_thread_build_va (utils.c:1294) ==31589== by 0x80C3DB0: ast_log (logger.c:807) ==31589== by 0x66FF4BF: ??? (lock.h:340) ==31589== by 0x670873A: ??? (chan_agent.c:2544) ==31589== by 0x80A1591: ast_device_state (devicestate.c:170) ==31589== by 0x80A1FC1: do_state_change (devicestate.c:285) ==31589== by 0x80A23E2: do_devstate_changes (devicestate.c:369) ==31589== by 0x81191A4: dummy_start (utils.c:852) ==31589== by 0x4E63E45A: start_thread (in /lib/libpthread-2.5.so) ==31589== ==31589== ERROR SUMMARY: 7390 errors from 10 contexts (suppressed: 693 from 1) ==31589== malloc/free: in use at exit: 4,030,888 bytes in 9,958 blocks. ==31589== malloc/free: 163,619 allocs, 153,661 frees, 25,416,052 bytes allocated. ==31589== For counts of detected errors, rerun with: -v ==31589== searching for pointers to 9,958 not-freed blocks. ==31589== checked 38,471,984 bytes. ==31589== ==31589== LEAK SUMMARY: ==31589== definitely lost: 626 bytes in 42 blocks. ==31589== possibly lost: 5,168 bytes in 38 blocks. ==31589== still reachable: 4,025,094 bytes in 9,878 blocks. ==31589== suppressed: 0 bytes in 0 blocks. ==31589== Use --leak-check=full to see details of leaked memory.