==27860== Memcheck, a memory error detector. ==27860== Copyright (C) 2002-2008, and GNU GPL'd, by Julian Seward et al. ==27860== Using LibVEX rev 1878, a library for dynamic binary translation. ==27860== Copyright (C) 2004-2008, and GNU GPL'd, by OpenWorks LLP. ==27860== Using valgrind-3.4.0, a dynamic binary instrumentation framework. ==27860== Copyright (C) 2000-2008, and GNU GPL'd, by Julian Seward et al. ==27860== For more details, rerun with: -v ==27860== ==27860== My PID = 27860, parent PID = 23031. Prog and args are: ==27860== asterisk ==27860== -vvvvcg ==27860== ==27860== Invalid read of size 1 ==27860== at 0x4013C1D: _dl_close (dl-close.c:717) ==27860== by 0x44F1C93: (within /lib/libdl-2.9.so) ==27860== by 0x400E4A5: _dl_catch_error (dl-error.c:178) ==27860== by 0x44F201B: (within /lib/libdl-2.9.so) ==27860== by 0x44F1CC9: dlclose (in /lib/libdl-2.9.so) ==27860== by 0x80FAEE7: load_dynamic_module (loader.c:401) ==27860== by 0x80FBE1D: load_resource (loader.c:663) ==27860== by 0x80FC82A: load_modules (loader.c:878) ==27860== by 0x8080D48: main (asterisk.c:3586) ==27860== Address 0x4b565f8 is 512 bytes inside a block of size 652 free'd ==27860== at 0x4023B2A: free (vg_replace_malloc.c:323) ==27860== by 0x4013774: _dl_close_worker (dl-close.c:664) ==27860== by 0x4013C46: _dl_close (dl-close.c:730) ==27860== by 0x44F1C93: (within /lib/libdl-2.9.so) ==27860== by 0x400E4A5: _dl_catch_error (dl-error.c:178) ==27860== by 0x44F201B: (within /lib/libdl-2.9.so) ==27860== by 0x44F1CC9: dlclose (in /lib/libdl-2.9.so) ==27860== by 0x80FAEE7: load_dynamic_module (loader.c:401) ==27860== by 0x80FBE1D: load_resource (loader.c:663) ==27860== by 0x80FC82A: load_modules (loader.c:878) ==27860== by 0x8080D48: main (asterisk.c:3586) ==27860== ==27860== Invalid read of size 1 ==27860== at 0x4025438: strlen (mc_replace_strmem.c:243) ==27860== by 0x400E58B: _dl_signal_error (dl-error.c:87) ==27860== by 0x4013C72: _dl_close (dl-close.c:725) ==27860== by 0x44F1C93: (within /lib/libdl-2.9.so) ==27860== by 0x400E4A5: _dl_catch_error (dl-error.c:178) ==27860== by 0x44F201B: (within /lib/libdl-2.9.so) ==27860== by 0x44F1CC9: dlclose (in /lib/libdl-2.9.so) ==27860== by 0x80FAEE7: load_dynamic_module (loader.c:401) ==27860== by 0x80FBE1D: load_resource (loader.c:663) ==27860== by 0x80FC82A: load_modules (loader.c:878) ==27860== by 0x8080D48: main (asterisk.c:3586) ==27860== Address 0x4b563a0 is 0 bytes inside a block of size 40 free'd ==27860== at 0x4023B2A: free (vg_replace_malloc.c:323) ==27860== by 0x40136F0: _dl_close_worker (dl-close.c:636) ==27860== by 0x4013C46: _dl_close (dl-close.c:730) ==27860== by 0x44F1C93: (within /lib/libdl-2.9.so) ==27860== by 0x400E4A5: _dl_catch_error (dl-error.c:178) ==27860== by 0x44F201B: (within /lib/libdl-2.9.so) ==27860== by 0x44F1CC9: dlclose (in /lib/libdl-2.9.so) ==27860== by 0x80FAEE7: load_dynamic_module (loader.c:401) ==27860== by 0x80FBE1D: load_resource (loader.c:663) ==27860== by 0x80FC82A: load_modules (loader.c:878) ==27860== by 0x8080D48: main (asterisk.c:3586) ==27860== ==27860== Invalid read of size 1 ==27860== at 0x4025443: strlen (mc_replace_strmem.c:243) ==27860== by 0x400E58B: _dl_signal_error (dl-error.c:87) ==27860== by 0x4013C72: _dl_close (dl-close.c:725) ==27860== by 0x44F1C93: (within /lib/libdl-2.9.so) ==27860== by 0x400E4A5: _dl_catch_error (dl-error.c:178) ==27860== by 0x44F201B: (within /lib/libdl-2.9.so) ==27860== by 0x44F1CC9: dlclose (in /lib/libdl-2.9.so) ==27860== by 0x80FAEE7: load_dynamic_module (loader.c:401) ==27860== by 0x80FBE1D: load_resource (loader.c:663) ==27860== by 0x80FC82A: load_modules (loader.c:878) ==27860== by 0x8080D48: main (asterisk.c:3586) ==27860== Address 0x4b563a1 is 1 bytes inside a block of size 40 free'd ==27860== at 0x4023B2A: free (vg_replace_malloc.c:323) ==27860== by 0x40136F0: _dl_close_worker (dl-close.c:636) ==27860== by 0x4013C46: _dl_close (dl-close.c:730) ==27860== by 0x44F1C93: (within /lib/libdl-2.9.so) ==27860== by 0x400E4A5: _dl_catch_error (dl-error.c:178) ==27860== by 0x44F201B: (within /lib/libdl-2.9.so) ==27860== by 0x44F1CC9: dlclose (in /lib/libdl-2.9.so) ==27860== by 0x80FAEE7: load_dynamic_module (loader.c:401) ==27860== by 0x80FBE1D: load_resource (loader.c:663) ==27860== by 0x80FC82A: load_modules (loader.c:878) ==27860== by 0x8080D48: main (asterisk.c:3586) ==27860== ==27860== Invalid read of size 1 ==27860== at 0x401718E: memcpy (memcpy.S:75) ==27860== by 0x4013C72: _dl_close (dl-close.c:725) ==27860== by 0x44F1C93: (within /lib/libdl-2.9.so) ==27860== by 0x400E4A5: _dl_catch_error (dl-error.c:178) ==27860== by 0x44F201B: (within /lib/libdl-2.9.so) ==27860== by 0x44F1CC9: dlclose (in /lib/libdl-2.9.so) ==27860== by 0x80FAEE7: load_dynamic_module (loader.c:401) ==27860== by 0x80FBE1D: load_resource (loader.c:663) ==27860== by 0x80FC82A: load_modules (loader.c:878) ==27860== by 0x8080D48: main (asterisk.c:3586) ==27860== Address 0x4b563a0 is 0 bytes inside a block of size 40 free'd ==27860== at 0x4023B2A: free (vg_replace_malloc.c:323) ==27860== by 0x40136F0: _dl_close_worker (dl-close.c:636) ==27860== by 0x4013C46: _dl_close (dl-close.c:730) ==27860== by 0x44F1C93: (within /lib/libdl-2.9.so) ==27860== by 0x400E4A5: _dl_catch_error (dl-error.c:178) ==27860== by 0x44F201B: (within /lib/libdl-2.9.so) ==27860== by 0x44F1CC9: dlclose (in /lib/libdl-2.9.so) ==27860== by 0x80FAEE7: load_dynamic_module (loader.c:401) ==27860== by 0x80FBE1D: load_resource (loader.c:663) ==27860== by 0x80FC82A: load_modules (loader.c:878) ==27860== by 0x8080D48: main (asterisk.c:3586) ==27860== ==27860== Invalid read of size 1 ==27860== at 0x40171DC: memcpy (memcpy.S:118) ==27860== by 0x4013C72: _dl_close (dl-close.c:725) ==27860== by 0x44F1C93: (within /lib/libdl-2.9.so) ==27860== by 0x400E4A5: _dl_catch_error (dl-error.c:178) ==27860== by 0x44F201B: (within /lib/libdl-2.9.so) ==27860== by 0x44F1CC9: dlclose (in /lib/libdl-2.9.so) ==27860== by 0x80FAEE7: load_dynamic_module (loader.c:401) ==27860== by 0x80FBE1D: load_resource (loader.c:663) ==27860== by 0x80FC82A: load_modules (loader.c:878) ==27860== by 0x8080D48: main (asterisk.c:3586) ==27860== Address 0x4b563c1 is 33 bytes inside a block of size 40 free'd ==27860== at 0x4023B2A: free (vg_replace_malloc.c:323) ==27860== by 0x40136F0: _dl_close_worker (dl-close.c:636) ==27860== by 0x4013C46: _dl_close (dl-close.c:730) ==27860== by 0x44F1C93: (within /lib/libdl-2.9.so) ==27860== by 0x400E4A5: _dl_catch_error (dl-error.c:178) ==27860== by 0x44F201B: (within /lib/libdl-2.9.so) ==27860== by 0x44F1CC9: dlclose (in /lib/libdl-2.9.so) ==27860== by 0x80FAEE7: load_dynamic_module (loader.c:401) ==27860== by 0x80FBE1D: load_resource (loader.c:663) ==27860== by 0x80FC82A: load_modules (loader.c:878) ==27860== by 0x8080D48: main (asterisk.c:3586) ==27860== ==27860== Source and destination overlap in memcpy(0xBEDD263C, 0xBEDD26DC, 428) ==27860== at 0x40258F9: memcpy (mc_replace_strmem.c:402) ==27860== by 0x571184E: Decode (iLBC_decode.c:254) ==27860== by 0x57122F3: iLBC_decode (iLBC_decode.c:508) ==27860== by 0x5710E4F: ilbctolin_framein (codec_ilbc.c:108) ==27860== by 0x816FAE1: framein (translate.c:193) ==27860== by 0x8170EEC: calc_cost (translate.c:420) ==27860== by 0x817220B: __ast_register_translator (translate.c:672) ==27860== by 0x5711134: load_module (codec_ilbc.c:200) ==27860== by 0x80FBF5C: load_resource (loader.c:694) ==27860== by 0x80FC98C: load_modules (loader.c:898) ==27860== by 0x8080D48: main (asterisk.c:3586) ==27860== ==27860== Source and destination overlap in memcpy(0xBEDD263C, 0xBEDD26DC, 428) ==27860== at 0x40258F9: memcpy (mc_replace_strmem.c:402) ==27860== by 0x5711A05: Decode (iLBC_decode.c:302) ==27860== by 0x57122F3: iLBC_decode (iLBC_decode.c:508) ==27860== by 0x5710E4F: ilbctolin_framein (codec_ilbc.c:108) ==27860== by 0x816FAE1: framein (translate.c:193) ==27860== by 0x8170EEC: calc_cost (translate.c:420) ==27860== by 0x817220B: __ast_register_translator (translate.c:672) ==27860== by 0x5711134: load_module (codec_ilbc.c:200) ==27860== by 0x80FBF5C: load_resource (loader.c:694) ==27860== by 0x80FC98C: load_modules (loader.c:898) ==27860== by 0x8080D48: main (asterisk.c:3586) ==27860== ==27860== Source and destination overlap in memcpy(0xBEDD2E40, 0xBEDD2EE0, 428) ==27860== at 0x40258F9: memcpy (mc_replace_strmem.c:402) ==27860== by 0x5713458: iLBC_encode (iLBC_encode.c:311) ==27860== by 0x571101D: lintoilbc_frameout (codec_ilbc.c:148) ==27860== by 0x8170F2B: calc_cost (translate.c:422) ==27860== by 0x817220B: __ast_register_translator (translate.c:672) ==27860== by 0x5711157: load_module (codec_ilbc.c:202) ==27860== by 0x80FBF5C: load_resource (loader.c:694) ==27860== by 0x80FC98C: load_modules (loader.c:898) ==27860== by 0x8080D48: main (asterisk.c:3586) ==27860== ==27860== Thread 13: ==27860== Invalid read of size 4 ==27860== at 0x5034E1B: handle_transfer_button (chan_skinny.c:4124) ==27860== by 0x503A9E1: handle_soft_key_event_message (chan_skinny.c:5466) ==27860== by 0x503C74F: handle_message (chan_skinny.c:5869) ==27860== by 0x503D871: skinny_session (chan_skinny.c:6038) ==27860== by 0x8179AF4: dummy_start (utils.c:968) ==27860== by 0x44FB314: start_thread (in /lib/i686/libpthread-2.9.so) ==27860== by 0x42EE25D: clone (in /lib/i686/libc-2.9.so) ==27860== Address 0x664 is not stack'd, malloc'd or (recently) free'd ==27860== ==27860== Process terminating with default action of signal 11 (SIGSEGV): dumping core ==27860== Access not within mapped region at address 0x664 ==27860== at 0x5034E1B: handle_transfer_button (chan_skinny.c:4124) ==27860== by 0x503A9E1: handle_soft_key_event_message (chan_skinny.c:5466) ==27860== by 0x503C74F: handle_message (chan_skinny.c:5869) ==27860== by 0x503D871: skinny_session (chan_skinny.c:6038) ==27860== by 0x8179AF4: dummy_start (utils.c:968) ==27860== by 0x44FB314: start_thread (in /lib/i686/libpthread-2.9.so) ==27860== by 0x42EE25D: clone (in /lib/i686/libc-2.9.so) ==27860== If you believe this happened as a result of a stack overflow in your ==27860== program's main thread (unlikely but possible), you can try to increase ==27860== the size of the main thread stack using the --main-stacksize= flag. ==27860== The main thread stack size used in this run was 8388608. ==27860== ==27860== ERROR SUMMARY: 4064 errors from 9 contexts (suppressed: 1127 from 3) ==27860== malloc/free: in use at exit: 3,761,980 bytes in 30,980 blocks. ==27860== malloc/free: 117,571 allocs, 86,591 frees, 15,827,761 bytes allocated. ==27860== For counts of detected errors, rerun with: -v ==27860== searching for pointers to 30,980 not-freed blocks. ==27860== checked 8,731,856 bytes. ==27860== ==27860== LEAK SUMMARY: ==27860== definitely lost: 1,583 bytes in 34 blocks. ==27860== possibly lost: 239,504 bytes in 246 blocks. ==27860== still reachable: 3,520,893 bytes in 30,700 blocks. ==27860== suppressed: 0 bytes in 0 blocks. ==27860== Rerun with --leak-check=full to see details of leaked memory.