==2166== Memcheck, a memory error detector.
==2166== Copyright (C) 2002-2006, and GNU GPL'd, by Julian Seward et al.
==2166== Using LibVEX rev 1658, a library for dynamic binary translation.
==2166== Copyright (C) 2004-2006, and GNU GPL'd, by OpenWorks LLP.
==2166== Using valgrind-3.2.1, a dynamic binary instrumentation framework.
==2166== Copyright (C) 2000-2006, and GNU GPL'd, by Julian Seward et al.
==2166== For more details, rerun with: -v
==2166== 
==2166== My PID = 2166, parent PID = 2165.  Prog and args are:
==2166==    asterisk
==2166==    -U
==2166==    asterisk
==2166==    -G
==2166==    asterisk
==2166==    -vvvvdcg
==2166== 
==2166== Invalid read of size 1
==2166==    at 0x4E4BE1ED: _dl_close (in /lib/ld-2.5.so)
==2166==    by 0x4E60ACE3: dlclose_doit (in /lib/libdl-2.5.so)
==2166==    by 0x4E4B8C35: _dl_catch_error (in /lib/ld-2.5.so)
==2166==    by 0x4E60B2CB: _dlerror_run (in /lib/libdl-2.5.so)
==2166==    by 0x4E60AD19: dlclose (in /lib/libdl-2.5.so)
==2166==    by 0x80BF8BA: load_dynamic_module (loader.c:389)
==2166==    by 0x80C06A2: load_resource (loader.c:646)
==2166==    by 0x80C0EBD: load_modules (loader.c:847)
==2166==    by 0x807322B: main (asterisk.c:2957)
==2166==  Address 0x4077E0C is 516 bytes inside a block of size 645 free'd
==2166==    at 0x400501A: free (vg_replace_malloc.c:233)
==2166==    by 0x4E4BDD9C: _dl_close_worker (in /lib/ld-2.5.so)
==2166==    by 0x4E4BE216: _dl_close (in /lib/ld-2.5.so)
==2166==    by 0x4E60ACE3: dlclose_doit (in /lib/libdl-2.5.so)
==2166==    by 0x4E4B8C35: _dl_catch_error (in /lib/ld-2.5.so)
==2166==    by 0x4E60B2CB: _dlerror_run (in /lib/libdl-2.5.so)
==2166==    by 0x4E60AD19: dlclose (in /lib/libdl-2.5.so)
==2166==    by 0x80BF8BA: load_dynamic_module (loader.c:389)
==2166==    by 0x80C06A2: load_resource (loader.c:646)
==2166==    by 0x80C0EBD: load_modules (loader.c:847)
==2166==    by 0x807322B: main (asterisk.c:2957)
==2166== 
==2166== Invalid read of size 4
==2166==    at 0x4E4BE1F6: _dl_close (in /lib/ld-2.5.so)
==2166==    by 0x4E60ACE3: dlclose_doit (in /lib/libdl-2.5.so)
==2166==    by 0x4E4B8C35: _dl_catch_error (in /lib/ld-2.5.so)
==2166==    by 0x4E60B2CB: _dlerror_run (in /lib/libdl-2.5.so)
==2166==    by 0x4E60AD19: dlclose (in /lib/libdl-2.5.so)
==2166==    by 0x80BF8BA: load_dynamic_module (loader.c:389)
==2166==    by 0x80C06A2: load_resource (loader.c:646)
==2166==    by 0x80C0EBD: load_modules (loader.c:847)
==2166==    by 0x807322B: main (asterisk.c:2957)
==2166==  Address 0x4077D90 is 392 bytes inside a block of size 645 free'd
==2166==    at 0x400501A: free (vg_replace_malloc.c:233)
==2166==    by 0x4E4BDD9C: _dl_close_worker (in /lib/ld-2.5.so)
==2166==    by 0x4E4BE216: _dl_close (in /lib/ld-2.5.so)
==2166==    by 0x4E60ACE3: dlclose_doit (in /lib/libdl-2.5.so)
==2166==    by 0x4E4B8C35: _dl_catch_error (in /lib/ld-2.5.so)
==2166==    by 0x4E60B2CB: _dlerror_run (in /lib/libdl-2.5.so)
==2166==    by 0x4E60AD19: dlclose (in /lib/libdl-2.5.so)
==2166==    by 0x80BF8BA: load_dynamic_module (loader.c:389)
==2166==    by 0x80C06A2: load_resource (loader.c:646)
==2166==    by 0x80C0EBD: load_modules (loader.c:847)
==2166==    by 0x807322B: main (asterisk.c:2957)
==2166== 
==2166== Invalid read of size 4
==2166==    at 0x4E4BE22D: _dl_close (in /lib/ld-2.5.so)
==2166==    by 0x4E60ACE3: dlclose_doit (in /lib/libdl-2.5.so)
==2166==    by 0x4E4B8C35: _dl_catch_error (in /lib/ld-2.5.so)
==2166==    by 0x4E60B2CB: _dlerror_run (in /lib/libdl-2.5.so)
==2166==    by 0x4E60AD19: dlclose (in /lib/libdl-2.5.so)
==2166==    by 0x80BF8BA: load_dynamic_module (loader.c:389)
==2166==    by 0x80C06A2: load_resource (loader.c:646)
==2166==    by 0x80C0EBD: load_modules (loader.c:847)
==2166==    by 0x807322B: main (asterisk.c:2957)
==2166==  Address 0x4077C0C is 4 bytes inside a block of size 645 free'd
==2166==    at 0x400501A: free (vg_replace_malloc.c:233)
==2166==    by 0x4E4BDD9C: _dl_close_worker (in /lib/ld-2.5.so)
==2166==    by 0x4E4BE216: _dl_close (in /lib/ld-2.5.so)
==2166==    by 0x4E60ACE3: dlclose_doit (in /lib/libdl-2.5.so)
==2166==    by 0x4E4B8C35: _dl_catch_error (in /lib/ld-2.5.so)
==2166==    by 0x4E60B2CB: _dlerror_run (in /lib/libdl-2.5.so)
==2166==    by 0x4E60AD19: dlclose (in /lib/libdl-2.5.so)
==2166==    by 0x80BF8BA: load_dynamic_module (loader.c:389)
==2166==    by 0x80C06A2: load_resource (loader.c:646)
==2166==    by 0x80C0EBD: load_modules (loader.c:847)
==2166==    by 0x807322B: main (asterisk.c:2957)
==2166== 
==2166== Invalid read of size 1
==2166==    at 0x4006298: strlen (mc_replace_strmem.c:247)
==2166==    by 0x4E4B8D31: _dl_signal_error (in /lib/ld-2.5.so)
==2166==    by 0x4E4BE242: _dl_close (in /lib/ld-2.5.so)
==2166==    by 0x4E60ACE3: dlclose_doit (in /lib/libdl-2.5.so)
==2166==    by 0x4E4B8C35: _dl_catch_error (in /lib/ld-2.5.so)
==2166==    by 0x4E60B2CB: _dlerror_run (in /lib/libdl-2.5.so)
==2166==    by 0x4E60AD19: dlclose (in /lib/libdl-2.5.so)
==2166==    by 0x80BF8BA: load_dynamic_module (loader.c:389)
==2166==    by 0x80C06A2: load_resource (loader.c:646)
==2166==    by 0x80C0EBD: load_modules (loader.c:847)
==2166==    by 0x807322B: main (asterisk.c:2957)
==2166==  Address 0x4077BA8 is 0 bytes inside a block of size 45 free'd
==2166==    at 0x400501A: free (vg_replace_malloc.c:233)
==2166==    by 0x4E4BDD15: _dl_close_worker (in /lib/ld-2.5.so)
==2166==    by 0x4E4BE216: _dl_close (in /lib/ld-2.5.so)
==2166==    by 0x4E60ACE3: dlclose_doit (in /lib/libdl-2.5.so)
==2166==    by 0x4E4B8C35: _dl_catch_error (in /lib/ld-2.5.so)
==2166==    by 0x4E60B2CB: _dlerror_run (in /lib/libdl-2.5.so)
==2166==    by 0x4E60AD19: dlclose (in /lib/libdl-2.5.so)
==2166==    by 0x80BF8BA: load_dynamic_module (loader.c:389)
==2166==    by 0x80C06A2: load_resource (loader.c:646)
==2166==    by 0x80C0EBD: load_modules (loader.c:847)
==2166==    by 0x807322B: main (asterisk.c:2957)
==2166== 
==2166== Invalid read of size 1
==2166==    at 0x40062A3: strlen (mc_replace_strmem.c:247)
==2166==    by 0x4E4B8D31: _dl_signal_error (in /lib/ld-2.5.so)
==2166==    by 0x4E4BE242: _dl_close (in /lib/ld-2.5.so)
==2166==    by 0x4E60ACE3: dlclose_doit (in /lib/libdl-2.5.so)
==2166==    by 0x4E4B8C35: _dl_catch_error (in /lib/ld-2.5.so)
==2166==    by 0x4E60B2CB: _dlerror_run (in /lib/libdl-2.5.so)
==2166==    by 0x4E60AD19: dlclose (in /lib/libdl-2.5.so)
==2166==    by 0x80BF8BA: load_dynamic_module (loader.c:389)
==2166==    by 0x80C06A2: load_resource (loader.c:646)
==2166==    by 0x80C0EBD: load_modules (loader.c:847)
==2166==    by 0x807322B: main (asterisk.c:2957)
==2166==  Address 0x4077BA9 is 1 bytes inside a block of size 45 free'd
==2166==    at 0x400501A: free (vg_replace_malloc.c:233)
==2166==    by 0x4E4BDD15: _dl_close_worker (in /lib/ld-2.5.so)
==2166==    by 0x4E4BE216: _dl_close (in /lib/ld-2.5.so)
==2166==    by 0x4E60ACE3: dlclose_doit (in /lib/libdl-2.5.so)
==2166==    by 0x4E4B8C35: _dl_catch_error (in /lib/ld-2.5.so)
==2166==    by 0x4E60B2CB: _dlerror_run (in /lib/libdl-2.5.so)
==2166==    by 0x4E60AD19: dlclose (in /lib/libdl-2.5.so)
==2166==    by 0x80BF8BA: load_dynamic_module (loader.c:389)
==2166==    by 0x80C06A2: load_resource (loader.c:646)
==2166==    by 0x80C0EBD: load_modules (loader.c:847)
==2166==    by 0x807322B: main (asterisk.c:2957)
==2166== 
==2166== Invalid read of size 1
==2166==    at 0x4E4C0B05: memcpy (in /lib/ld-2.5.so)
==2166==    by 0x4E4BE242: _dl_close (in /lib/ld-2.5.so)
==2166==    by 0x4E60ACE3: dlclose_doit (in /lib/libdl-2.5.so)
==2166==    by 0x4E4B8C35: _dl_catch_error (in /lib/ld-2.5.so)
==2166==    by 0x4E60B2CB: _dlerror_run (in /lib/libdl-2.5.so)
==2166==    by 0x4E60AD19: dlclose (in /lib/libdl-2.5.so)
==2166==    by 0x80BF8BA: load_dynamic_module (loader.c:389)
==2166==    by 0x80C06A2: load_resource (loader.c:646)
==2166==    by 0x80C0EBD: load_modules (loader.c:847)
==2166==    by 0x807322B: main (asterisk.c:2957)
==2166==  Address 0x4077BA8 is 0 bytes inside a block of size 45 free'd
==2166==    at 0x400501A: free (vg_replace_malloc.c:233)
==2166==    by 0x4E4BDD15: _dl_close_worker (in /lib/ld-2.5.so)
==2166==    by 0x4E4BE216: _dl_close (in /lib/ld-2.5.so)
==2166==    by 0x4E60ACE3: dlclose_doit (in /lib/libdl-2.5.so)
==2166==    by 0x4E4B8C35: _dl_catch_error (in /lib/ld-2.5.so)
==2166==    by 0x4E60B2CB: _dlerror_run (in /lib/libdl-2.5.so)
==2166==    by 0x4E60AD19: dlclose (in /lib/libdl-2.5.so)
==2166==    by 0x80BF8BA: load_dynamic_module (loader.c:389)
==2166==    by 0x80C06A2: load_resource (loader.c:646)
==2166==    by 0x80C0EBD: load_modules (loader.c:847)
==2166==    by 0x807322B: main (asterisk.c:2957)
==2166== 
==2166== Invalid read of size 4
==2166==    at 0x4E4C0B0C: memcpy (in /lib/ld-2.5.so)
==2166==    by 0x4E4BE242: _dl_close (in /lib/ld-2.5.so)
==2166==    by 0x4E60ACE3: dlclose_doit (in /lib/libdl-2.5.so)
==2166==    by 0x4E4B8C35: _dl_catch_error (in /lib/ld-2.5.so)
==2166==    by 0x4E60B2CB: _dlerror_run (in /lib/libdl-2.5.so)
==2166==    by 0x4E60AD19: dlclose (in /lib/libdl-2.5.so)
==2166==    by 0x80BF8BA: load_dynamic_module (loader.c:389)
==2166==    by 0x80C06A2: load_resource (loader.c:646)
==2166==    by 0x80C0EBD: load_modules (loader.c:847)
==2166==    by 0x807322B: main (asterisk.c:2957)
==2166==  Address 0x4077BA9 is 1 bytes inside a block of size 45 free'd
==2166==    at 0x400501A: free (vg_replace_malloc.c:233)
==2166==    by 0x4E4BDD15: _dl_close_worker (in /lib/ld-2.5.so)
==2166==    by 0x4E4BE216: _dl_close (in /lib/ld-2.5.so)
==2166==    by 0x4E60ACE3: dlclose_doit (in /lib/libdl-2.5.so)
==2166==    by 0x4E4B8C35: _dl_catch_error (in /lib/ld-2.5.so)
==2166==    by 0x4E60B2CB: _dlerror_run (in /lib/libdl-2.5.so)
==2166==    by 0x4E60AD19: dlclose (in /lib/libdl-2.5.so)
==2166==    by 0x80BF8BA: load_dynamic_module (loader.c:389)
==2166==    by 0x80C06A2: load_resource (loader.c:646)
==2166==    by 0x80C0EBD: load_modules (loader.c:847)
==2166==    by 0x807322B: main (asterisk.c:2957)
==2166== 
==2166== Invalid read of size 2
==2166==    at 0x4E4C0B0A: memcpy (in /lib/ld-2.5.so)
==2166==    by 0x4E4BE242: _dl_close (in /lib/ld-2.5.so)
==2166==    by 0x4E60ACE3: dlclose_doit (in /lib/libdl-2.5.so)
==2166==    by 0x4E4B8C35: _dl_catch_error (in /lib/ld-2.5.so)
==2166==    by 0x4E60B2CB: _dlerror_run (in /lib/libdl-2.5.so)
==2166==    by 0x4E60AD19: dlclose (in /lib/libdl-2.5.so)
==2166==    by 0x80BF8BA: load_dynamic_module (loader.c:389)
==2166==    by 0x80C06A2: load_resource (loader.c:646)
==2166==    by 0x80C0EBD: load_modules (loader.c:847)
==2166==    by 0x807322B: main (asterisk.c:2957)
==2166==  Address 0x40793B1 is 1 bytes inside a block of size 39 free'd
==2166==    at 0x400501A: free (vg_replace_malloc.c:233)
==2166==    by 0x4E4BDD15: _dl_close_worker (in /lib/ld-2.5.so)
==2166==    by 0x4E4BE216: _dl_close (in /lib/ld-2.5.so)
==2166==    by 0x4E60ACE3: dlclose_doit (in /lib/libdl-2.5.so)
==2166==    by 0x4E4B8C35: _dl_catch_error (in /lib/ld-2.5.so)
==2166==    by 0x4E60B2CB: _dlerror_run (in /lib/libdl-2.5.so)
==2166==    by 0x4E60AD19: dlclose (in /lib/libdl-2.5.so)
==2166==    by 0x80BF8BA: load_dynamic_module (loader.c:389)
==2166==    by 0x80C06A2: load_resource (loader.c:646)
==2166==    by 0x80C0EBD: load_modules (loader.c:847)
==2166==    by 0x807322B: main (asterisk.c:2957)
==2166== 
==2166== Thread 31:
==2166== Syscall param write(buf) points to uninitialised byte(s)
==2166==    at 0x4E644D9B: (within /lib/libpthread-2.5.so)
==2166==    by 0x813CE9B: __mpool_sync (mpool.c:308)
==2166==    by 0x8138300: __bt_sync (bt_close.c:146)
==2166==    by 0x809F97E: ast_db_put (db.c:165)
==2166==    by 0x631CC83: ??? (func_db.c:98)
==2166==    by 0x80D477A: ast_func_write (pbx.c:1557)
==2166==    by 0x80E0491: pbx_builtin_setvar_helper (pbx.c:5857)
==2166==    by 0x80E091A: pbx_builtin_setvar (pbx.c:5930)
==2166==    by 0x80D179D: pbx_exec (pbx.c:532)
==2166==    by 0x80D53D2: pbx_extension_helper (pbx.c:1851)
==2166==    by 0x80D674A: ast_spawn_extension (pbx.c:2306)
==2166==    by 0x80D6CC8: __ast_pbx_run (pbx.c:2408)
==2166==  Address 0x46B7358 is 224 bytes inside a block of size 4,232 alloc'd
==2166==    at 0x4005400: malloc (vg_replace_malloc.c:149)
==2166==    by 0x8074152: __ast_alloc_region (astmm.c:102)
==2166==    by 0x80743AB: __ast_malloc (astmm.c:203)
==2166==    by 0x813D04B: mpool_bkt (mpool.c:383)
==2166==    by 0x813CBBE: __mpool_get (mpool.c:210)
==2166==    by 0x8139F57: __bt_search (bt_search.c:78)
==2166==    by 0x814015A: __bt_get (bt_get.c:87)
==2166==    by 0x809FB7D: ast_db_get (db.c:191)
==2166==    by 0x47CB30F: ??? (chan_iax2.c:5892)
==2166==    by 0x47E317E: ??? (chan_iax2.c:9931)
==2166==    by 0x47E5DD1: ??? (chan_iax2.c:10859)
==2166==    by 0x80C077D: load_resource (loader.c:672)
==2166== 
==2166== Invalid read of size 4
==2166==    at 0x80B2069: ast_frame_free (frame.c:340)
==2166==    by 0x80915A8: ast_generic_bridge (channel.c:3813)
==2166==    by 0x80924BE: ast_channel_bridge (channel.c:4057)
==2166==    by 0x4203185: ast_bridge_call (res_features.c:1420)
==2166==    by 0x4688EA1: ??? (app_dial.c:1706)
==2166==    by 0x4689AA0: ??? (app_dial.c:1760)
==2166==    by 0x80D179D: pbx_exec (pbx.c:532)
==2166==    by 0x80D53D2: pbx_extension_helper (pbx.c:1851)
==2166==    by 0x80D674A: ast_spawn_extension (pbx.c:2306)
==2166==    by 0x80D6CC8: __ast_pbx_run (pbx.c:2408)
==2166==    by 0x80D7A9D: pbx_thread (pbx.c:2623)
==2166==    by 0x81191A4: dummy_start (utils.c:852)
==2166==  Address 0x767DEAC is 124 bytes inside a block of size 33,340 free'd
==2166==    at 0x400501A: free (vg_replace_malloc.c:233)
==2166==    by 0x807388F: __ast_free_region (astmm.c:174)
==2166==    by 0x80743D3: __ast_free (astmm.c:208)
==2166==    by 0x810FCEE: destroy (translate.c:157)
==2166==    by 0x8113038: ast_translate_frame_freed (translate.c:977)
==2166==    by 0x80B2065: ast_frame_free (frame.c:338)
==2166==    by 0x80915A8: ast_generic_bridge (channel.c:3813)
==2166==    by 0x80924BE: ast_channel_bridge (channel.c:4057)
==2166==    by 0x4203185: ast_bridge_call (res_features.c:1420)
==2166==    by 0x4688EA1: ??? (app_dial.c:1706)
==2166==    by 0x4689AA0: ??? (app_dial.c:1760)
==2166==    by 0x80D179D: pbx_exec (pbx.c:532)
==2166== 
==2166== Thread 4:
==2166== Invalid read of size 1
==2166==    at 0x4006278: strlen (mc_replace_strmem.c:246)
==2166==    by 0x4E5071FE: vfprintf (in /lib/libc-2.5.so)
==2166==    by 0x4E525F63: vsnprintf (in /lib/libc-2.5.so)
==2166==    by 0x8119F86: ast_dynamic_str_thread_build_va (utils.c:1294)
==2166==    by 0x80C3DB0: ast_log (logger.c:807)
==2166==    by 0x66FF4BF: ??? (lock.h:340)
==2166==    by 0x670873A: ??? (chan_agent.c:2544)
==2166==    by 0x80A1591: ast_device_state (devicestate.c:170)
==2166==    by 0x80A1FC1: do_state_change (devicestate.c:285)
==2166==    by 0x80A23E2: do_devstate_changes (devicestate.c:369)
==2166==    by 0x81191A4: dummy_start (utils.c:852)
==2166==    by 0x4E63E45A: start_thread (in /lib/libpthread-2.5.so)
==2166==  Address 0x1 is not stack'd, malloc'd or (recently) free'd
==2166== 
==2166== Process terminating with default action of signal 11 (SIGSEGV): dumping core
==2166==  Access not within mapped region at address 0x1
==2166==    at 0x4006278: strlen (mc_replace_strmem.c:246)
==2166==    by 0x4E5071FE: vfprintf (in /lib/libc-2.5.so)
==2166==    by 0x4E525F63: vsnprintf (in /lib/libc-2.5.so)
==2166==    by 0x8119F86: ast_dynamic_str_thread_build_va (utils.c:1294)
==2166==    by 0x80C3DB0: ast_log (logger.c:807)
==2166==    by 0x66FF4BF: ??? (lock.h:340)
==2166==    by 0x670873A: ??? (chan_agent.c:2544)
==2166==    by 0x80A1591: ast_device_state (devicestate.c:170)
==2166==    by 0x80A1FC1: do_state_change (devicestate.c:285)
==2166==    by 0x80A23E2: do_devstate_changes (devicestate.c:369)
==2166==    by 0x81191A4: dummy_start (utils.c:852)
==2166==    by 0x4E63E45A: start_thread (in /lib/libpthread-2.5.so)
==2166== 
==2166== ERROR SUMMARY: 7403 errors from 11 contexts (suppressed: 693 from 1)
==2166== malloc/free: in use at exit: 4,355,073 bytes in 10,027 blocks.
==2166== malloc/free: 350,539 allocs, 340,512 frees, 69,782,385 bytes allocated.
==2166== For counts of detected errors, rerun with: -v
==2166== searching for pointers to 10,027 not-freed blocks.
==2166== checked 37,194,460 bytes.
==2166== 
==2166== LEAK SUMMARY:
==2166==    definitely lost: 491 bytes in 43 blocks.
==2166==      possibly lost: 4,080 bytes in 30 blocks.
==2166==    still reachable: 4,350,502 bytes in 9,954 blocks.
==2166==         suppressed: 0 bytes in 0 blocks.
==2166== Use --leak-check=full to see details of leaked memory.