Core was generated by `/usr/sbin/asterisk -f -vvvg -c'.
Program terminated with signal 11, Segmentation fault.
[New process 18511]
[New process 32422]
[New process 32412]
[New process 19975]
[New process 3166]
[New process 3165]
[New process 3164]
[New process 3163]
[New process 3162]
[New process 3161]
[New process 3160]
[New process 3159]
[New process 3158]
[New process 3157]
[New process 3156]
[New process 3151]
#0  0xb7ee7bd1 in vsnprintf () from /lib/tls/i686/cmov/libc.so.6
(gdb) bt
#0  0xb7ee7bd1 in vsnprintf () from /lib/tls/i686/cmov/libc.so.6
#1  0x0813df50 in __ast_string_field_ptr_build_va (mgr=0xb7c4ad38, pool_head=0xb7c4ac94, ptr=0xb7c4ad20, format=0xb7b2d7e8 "SIP/2.0/%s %s:%d;branch=z9hG4bK%08x%s", ap1=0xb7670090 "Îײ·¨Â\035\bÄ\023",
    ap2=0xb7670090 "Îײ·¨Â\035\bÄ\023") at utils.c:1365
#2  0x0813e01a in __ast_string_field_ptr_build (mgr=0xb7c4ad38, pool_head=0xb7c4ac94, ptr=0xb7c4ad20, format=0xb7b2d7e8 "SIP/2.0/%s %s:%d;branch=z9hG4bK%08x%s") at utils.c:1396
#3  0xb7acc245 in build_via (p=0xb7c4ac70) at chan_sip.c:2563
#4  0xb7ae2b92 in reqprep (req=0xb7670478, p=0xb7c4ac70, sipmethod=6, seqno=102, newbranch=1) at chan_sip.c:7354
#5  0xb7aee878 in transmit_request (p=0xb7c4ac70, sipmethod=6, seqno=102, reliable=XMIT_UNRELIABLE, newbranch=1) at chan_sip.c:9485
#6  0xb7b0a9ba in handle_response_invite (p=0xb7c4ac70, resp=200, rest=0xb7672f34 "OK", req=0xb7672d04, seqno=102) at chan_sip.c:14709
#7  0xb7b0d0d4 in handle_response (p=0xb7c4ac70, resp=200, rest=0xb7672f34 "OK", req=0xb7672d04, seqno=102) at chan_sip.c:15177
#8  0xb7b19e62 in handle_incoming (p=0xb7c4ac70, req=0xb7672d04, sin=0x81dbb90, recount=0xb7671a74, nounlock=0xb7671a70) at chan_sip.c:17885
#9  0xb7b1b219 in handle_request_do (req=0xb7672d04, sin=0x81dbb90) at chan_sip.c:18136
#10 0xb7acab62 in _sip_tcp_helper_thread (pvt=0x81f5980, ser=0x81dbb80) at chan_sip.c:2234
#11 0xb7aca5b6 in sip_tcp_helper_thread (data=0x81f5980) at chan_sip.c:2141
#12 0x0813d013 in dummy_start (data=0x81db330) at utils.c:872
#13 0xb7e6d4fb in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
#14 0xb7f5be5e in clone () from /lib/tls/i686/cmov/libc.so.6
(gdb) bt full
#0  0xb7ee7bd1 in vsnprintf () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.
#1  0x0813df50 in __ast_string_field_ptr_build_va (mgr=0xb7c4ad38, pool_head=0xb7c4ac94, ptr=0xb7c4ad20, format=0xb7b2d7e8 "SIP/2.0/%s %s:%d;branch=z9hG4bK%08x%s", ap1=0xb7670090 "Îײ·¨Â\035\bÄ\023",
    ap2=0xb7670090 "Îײ·¨Â\035\bÄ\023") at utils.c:1365
        needed = 5060
        dst = 0x9a <Address 0x9a out of bounds>
        p = (const char **) 0xb7c4ad20
        space = 874
#2  0x0813e01a in __ast_string_field_ptr_build (mgr=0xb7c4ad38, pool_head=0xb7c4ac94, ptr=0xb7c4ad20, format=0xb7b2d7e8 "SIP/2.0/%s %s:%d;branch=z9hG4bK%08x%s") at utils.c:1396
        ap1 = 0xb7670090 "Îײ·¨Â\035\bÄ\023"
        ap2 = 0xb7670090 "Îײ·¨Â\035\bÄ\023"
#3  0xb7acc245 in build_via (p=0xb7c4ac70) at chan_sip.c:2563
        rport = 0xb7b2d7de ";rport"
#4  0xb7ae2b92 in reqprep (req=0xb7670478, p=0xb7c4ac70, sipmethod=6, seqno=102, newbranch=1) at chan_sip.c:7354
        orig = (struct sip_request *) 0xb7c4afd4
        stripped = "«\027g·", '\0' <repeats 20 times>, "¬\004g·\000\000\000\000\001\200­û\000\000\000·\000\000\000\0006\005g·6\005g·7\005g·?\005g·\000\000\000\000?\005g·\000\000\000\000ÿÿÿÿ\000\000\000"
        tmp = "ôÿü·Ì\003g·m\tg·¸\004g·\004|î·Ì\003g·\221\016³·ð\004g·m\tg·\000\000\000\000l\004g·>\016\000\000\001\200­ûm\tg·m\tg·m\tg·m\tg·\200\tg·«\027g·m\tg·"
        newto = "\000\000\000\000ôÿà·\000\000\000\000@\ag·\b\ag·\225oà·\001\000\000\000\001\000\000\000@\ag·\000\004\000\000\\\017g·(\003g·-É\b\blKg·@\ag·\004\000\000\000OH\000\000\000\000\000\000\f\nç·1õæ·\030\227\035\b\001\000\000\000\204Kg·\024ö\030\b\000\000\000\000P\000\000\000\000\000\000\000\002\000\000\000\000\216ö·\000\000\000\000\f\nç·\027\000\000\000¥q\000\000\001\000\000\000\220Kg·X\003g·ôÿü·À\000\000\000\220Kg·H\003g·æ\216ö·Ô´Ä·<ù³·X\003g·í»\016\bÔ´Ä·\b\002\000\000¸\003g0 w\017\bÔ´Ä·"...
        c = 0xb7671180 ""
        ot = 0xb7670782 ""
        of = 0x0
        is_strict = 0
        is_outbound = 1
        __PRETTY_FUNCTION__ = "reqprep"
#5  0xb7aee878 in transmit_request (p=0xb7c4ac70, sipmethod=6, seqno=102, reliable=XMIT_UNRELIABLE, newbranch=1) at chan_sip.c:9485
        resp = {rlPart1 = 0x0, rlPart2 = 0x0, len = 0, headers = 0, method = 0, lines = 0, sdp_start = 0, sdp_end = 0, debug = 0 '\0', has_to_tag = 0 '\0', ignore = 0 '\0', header = {
    0x0 <repeats 64 times>}, line = {0x0 <repeats 64 times>}, data = '\0' <repeats 4095 times>, socket = {lock = 0x0, type = 0, fd = 0, port = 0, ser = 0x0}}
#6  0xb7b0a9ba in handle_response_invite (p=0xb7c4ac70, resp=200, rest=0xb7672f34 "OK", req=0xb7672d04, seqno=102) at chan_sip.c:14709
        outgoing = 1
        res = 0
        xmitres = 0
        reinvite = 0
        bridgepeer = (struct ast_channel *) 0x0
        p_hdrval = 0xb7b2d45e ""
        rtn = -1217980520
        __PRETTY_FUNCTION__ = "handle_response_invite"
#7  0xb7b0d0d4 in handle_response (p=0xb7c4ac70, resp=200, rest=0xb7672f34 "OK", req=0xb7672d04, seqno=102) at chan_sip.c:15177
        owner = (struct ast_channel *) 0x0
        sipmethod = 5
        res = 1
        c = 0xb7672fb6 "102 INVITE"
        msg = 0xb7672fba "INVITE"
        __PRETTY_FUNCTION__ = "handle_response"
#8  0xb7b19e62 in handle_incoming (p=0xb7c4ac70, req=0xb7672d04, sin=0x81dbb90, recount=0xb7671a74, nounlock=0xb7671a70) at chan_sip.c:17885
        ret = 0
        cmd = 0xb7672f28 "SIP/2.0"
        cseq = 0xb7672fb6 "102 INVITE"
        useragent = 0xb7b2d45e ""
        seqno = 102
        len = 4
        respid = 200
        res = 0
        debug = 0
        e = 0xb7672f30 "200 OK"
        error = 0
        __PRETTY_FUNCTION__ = "handle_incoming"
#9  0xb7b1b219 in handle_request_do (req=0xb7672d04, sin=0x81dbb90) at chan_sip.c:18136
        p = (struct sip_pvt *) 0xb7c4ac70
        recount = 0
---Type <return> to continue, or q <return> to quit---
        nounlock = 0
        lockretry = 100
        __PRETTY_FUNCTION__ = "handle_request_do"
#10 0xb7acab62 in _sip_tcp_helper_thread (pvt=0x81f5980, ser=0x81dbb80) at chan_sip.c:2234
        res = 1
        cl = 0
        req = {rlPart1 = 0xb7672f28 "SIP/2.0", rlPart2 = 0xb7672f30 "200 OK", len = 724, headers = 12, method = 1, lines = 9, sdp_start = 0, sdp_end = 9, debug = 0 '\0', has_to_tag = 0 '\0',
  ignore = 0 '\0', header = {0xb7672f28 "SIP/2.0", 0xb7672f38 "FROM: \"asterisk\"<sip:asterisk@192.168.20.2>;tag=as3634490b", 0xb7672f74 "TO: <sip:sv0072iv.voice:5070>;epid=77065E12E7;tag=f53d71f4",
    0xb7672fb0 "CSEQ: 102 INVITE", 0xb7672fc2 "CALL-ID: 5efab5f76531c260465e47c7214bf75a@192.168.20.2", 0xb7672ffa "VIA: SIP/2.0/TCP 192.168.20.2:5060;branch=z9hG4bK5d6756b2;rport",
    0xb767303b "CONTACT: <sip:sv0072iv.internal.veridian.on.ca:5070;transport=Tcp;maddr=192.168.20.4>;automata", 0xb767309b "CONTENT-LENGTH: 192", 0xb76730b0 "CONTENT-TYPE: application/sdp",
    0xb76730cf "ALLOW: UPDATE", 0xb76730de "SERVER: RTCC/3.0.0.0", 0xb76730f4 "ALLOW: Ack, Cancel, Bye,Invite,Message,Info,Service,Options,BeNotify", 0xb767313a "", 0x0 <repeats 51 times>}, line = {
    0xb767313c "v=0", 0xb7673141 "o=- 0 0 IN IP4 192.168.20.4", 0xb767315e "s=Microsoft Speech Server session", 0xb7673181 "c=IN IP4 192.168.20.4", 0xb7673198 "t=0 0",
    0xb767319f "m=audio 35840 RTP/AVP 0 101", 0xb76731bc "a=rtpmap:101 telephone-event/8000", 0xb76731df "a=fmtp:101 0-16", 0xb76731f0 "a=ptime:20", 0xb76731fc "", 0x0 <repeats 54 times>},
  data = "SIP/2.0\000200 OK\000\000FROM: \"asterisk\"<sip:asterisk@192.168.20.2>;tag=as3634490b\000\000TO: <sip:sv0072iv.voice:5070>;epid=77065E12E7;tag=f53d71f4\000\000CSEQ: 102 INVITE\000\000CALL-ID: 5efab5f76531c260465e47c7214bf75a@192."..., socket = {lock = 0x8205ff0, type = SIP_TRANSPORT_TCP, fd = 63, port = 50195, ser = 0x81dbb80}}
        reqcpy = {rlPart1 = 0xb7671cf0 "SIP/2.0", rlPart2 = 0xb7671cf8 "200 OK", len = 532, headers = 12, method = 0, lines = 0, sdp_start = 0, sdp_end = 0, debug = 0 '\0', has_to_tag = 0 '\0',
  ignore = 0 '\0', header = {0xb7671cf0 "SIP/2.0", 0xb7671d00 "FROM: \"asterisk\"<sip:asterisk@192.168.20.2>;tag=as3634490b", 0xb7671d3c "TO: <sip:sv0072iv.voice:5070>;epid=77065E12E7;tag=f53d71f4",
    0xb7671d78 "CSEQ: 102 INVITE", 0xb7671d8a "CALL-ID: 5efab5f76531c260465e47c7214bf75a@192.168.20.2", 0xb7671dc2 "VIA: SIP/2.0/TCP 192.168.20.2:5060;branch=z9hG4bK5d6756b2;rport",
    0xb7671e03 "CONTACT: <sip:sv0072iv.internal.veridian.on.ca:5070;transport=Tcp;maddr=192.168.20.4>;automata", 0xb7671e63 "CONTENT-LENGTH: 192", 0xb7671e78 "CONTENT-TYPE: application/sdp",
    0xb7671e97 "ALLOW: UPDATE", 0xb7671ea6 "SERVER: RTCC/3.0.0.0", 0xb7671ebc "ALLOW: Ack, Cancel, Bye,Invite,Message,Info,Service,Options,BeNotify", 0xb7671f02 "", 0x0 <repeats 51 times>}, line = {
    0xb7671f04 "", 0x0 <repeats 63 times>},
  data = "SIP/2.0\000200 OK\000\000FROM: \"asterisk\"<sip:asterisk@192.168.20.2>;tag=as3634490b\000\000TO: <sip:sv0072iv.voice:5070>;epid=77065E12E7;tag=f53d71f4\000\000CSEQ: 102 INVITE\000\000CALL-ID: 5efab5f76531c260465e47c7214bf75a@192."..., socket = {lock = 0x0, type = 0, fd = 0, port = 0, ser = 0x0}}
        me = (struct sip_threadinfo *) 0x81dbde0
        buf = "v=0\r\no=- 0 0 IN IP4 192.168.20.4\r\ns=Microsoft Speech Server session\r\nc=IN IP4 192.168.20.4\r\nt=0 0\r\nm=audio 35840 RTP/AVP 0 101\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=ptime:20\r\n", '\0' <repeats 572 times>...
        __PRETTY_FUNCTION__ = "_sip_tcp_helper_thread"
#11 0xb7aca5b6 in sip_tcp_helper_thread (data=0x81f5980) at chan_sip.c:2141
        pvt = (struct sip_pvt *) 0x81f5980
        ser = (struct ast_tcptls_session_instance *) 0x81dbb80
#12 0x0813d013 in dummy_start (data=0x81db330) at utils.c:872
        __cancel_buf = {__cancel_jmp_buf = {{__cancel_jmp_buf = {-1209544716, 0, -1217967216, -1217969192, -628694896, 866109422}, __mask_was_saved = 0}}, __pad = {0xb7674490, 0x0, 0x0, 0xb7fcfe90}}
        __cancel_routine = (void (*)(void *)) 0x8073556 <ast_unregister_thread>
        __cancel_arg = (void *) 0xb7674b90
        not_first_call = 0
        ret = (void *) 0xb7e6d2bd
        a = {start_routine = 0xb7aca58c <sip_tcp_helper_thread>, data = 0x81f5980, name = 0x8205fa0 "sip_tcp_helper_thread started at [18228] chan_sip.c sip_prepare_socket()"}
#13 0xb7e6d4fb in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#14 0xb7f5be5e in clone () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.