==29459== Memcheck, a memory error detector. ==29459== Copyright (C) 2002-2007, and GNU GPL'd, by Julian Seward et al. ==29459== Using LibVEX rev 1854, a library for dynamic binary translation. ==29459== Copyright (C) 2004-2007, and GNU GPL'd, by OpenWorks LLP. ==29459== Using valgrind-3.3.1, a dynamic binary instrumentation framework. ==29459== Copyright (C) 2000-2007, and GNU GPL'd, by Julian Seward et al. ==29459== For more details, rerun with: -v ==29459== ==29459== My PID = 29459, parent PID = 4686. Prog and args are: ==29459== /usr/sbin/asterisk ==29459== -vvvvcg ==29459== ==29459== Invalid read of size 1 ==29459== at 0x401328D: _dl_close (dl-close.c:717) ==29459== by 0x434DC93: (within /lib/libdl-2.8.so) ==29459== by 0x400DB15: _dl_catch_error (dl-error.c:178) ==29459== by 0x434E01B: (within /lib/libdl-2.8.so) ==29459== by 0x434DCC9: dlclose (in /lib/libdl-2.8.so) ==29459== by 0x80F5CF7: load_dynamic_module (loader.c:401) ==29459== by 0x80F6C2D: load_resource (loader.c:663) ==29459== by 0x80F763A: load_modules (loader.c:878) ==29459== by 0x807F899: main (asterisk.c:3391) ==29459== Address 0x44129b8 is 512 bytes inside a block of size 648 free'd ==29459== at 0x40218FA: free (vg_replace_malloc.c:323) ==29459== by 0x4012DE4: _dl_close_worker (dl-close.c:664) ==29459== by 0x40132B6: _dl_close (dl-close.c:730) ==29459== by 0x434DC93: (within /lib/libdl-2.8.so) ==29459== by 0x400DB15: _dl_catch_error (dl-error.c:178) ==29459== by 0x434E01B: (within /lib/libdl-2.8.so) ==29459== by 0x434DCC9: dlclose (in /lib/libdl-2.8.so) ==29459== by 0x80F5CF7: load_dynamic_module (loader.c:401) ==29459== by 0x80F6C2D: load_resource (loader.c:663) ==29459== by 0x80F763A: load_modules (loader.c:878) ==29459== by 0x807F899: main (asterisk.c:3391) ==29459== ==29459== Invalid read of size 1 ==29459== at 0x4023208: strlen (mc_replace_strmem.c:243) ==29459== by 0x400DBFB: _dl_signal_error (dl-error.c:87) ==29459== by 0x40132E2: _dl_close (dl-close.c:725) ==29459== by 0x434DC93: (within /lib/libdl-2.8.so) ==29459== by 0x400DB15: _dl_catch_error (dl-error.c:178) ==29459== by 0x434E01B: (within /lib/libdl-2.8.so) ==29459== by 0x434DCC9: dlclose (in /lib/libdl-2.8.so) ==29459== by 0x80F5CF7: load_dynamic_module (loader.c:401) ==29459== by 0x80F6C2D: load_resource (loader.c:663) ==29459== by 0x80F763A: load_modules (loader.c:878) ==29459== by 0x807F899: main (asterisk.c:3391) ==29459== Address 0x4412758 is 0 bytes inside a block of size 44 free'd ==29459== at 0x40218FA: free (vg_replace_malloc.c:323) ==29459== by 0x4012D5B: _dl_close_worker (dl-close.c:636) ==29459== by 0x40132B6: _dl_close (dl-close.c:730) ==29459== by 0x434DC93: (within /lib/libdl-2.8.so) ==29459== by 0x400DB15: _dl_catch_error (dl-error.c:178) ==29459== by 0x434E01B: (within /lib/libdl-2.8.so) ==29459== by 0x434DCC9: dlclose (in /lib/libdl-2.8.so) ==29459== by 0x80F5CF7: load_dynamic_module (loader.c:401) ==29459== by 0x80F6C2D: load_resource (loader.c:663) ==29459== by 0x80F763A: load_modules (loader.c:878) ==29459== by 0x807F899: main (asterisk.c:3391) ==29459== ==29459== Invalid read of size 1 ==29459== at 0x4023213: strlen (mc_replace_strmem.c:243) ==29459== by 0x400DBFB: _dl_signal_error (dl-error.c:87) ==29459== by 0x40132E2: _dl_close (dl-close.c:725) ==29459== by 0x434DC93: (within /lib/libdl-2.8.so) ==29459== by 0x400DB15: _dl_catch_error (dl-error.c:178) ==29459== by 0x434E01B: (within /lib/libdl-2.8.so) ==29459== by 0x434DCC9: dlclose (in /lib/libdl-2.8.so) ==29459== by 0x80F5CF7: load_dynamic_module (loader.c:401) ==29459== by 0x80F6C2D: load_resource (loader.c:663) ==29459== by 0x80F763A: load_modules (loader.c:878) ==29459== by 0x807F899: main (asterisk.c:3391) ==29459== Address 0x4412759 is 1 bytes inside a block of size 44 free'd ==29459== at 0x40218FA: free (vg_replace_malloc.c:323) ==29459== by 0x4012D5B: _dl_close_worker (dl-close.c:636) ==29459== by 0x40132B6: _dl_close (dl-close.c:730) ==29459== by 0x434DC93: (within /lib/libdl-2.8.so) ==29459== by 0x400DB15: _dl_catch_error (dl-error.c:178) ==29459== by 0x434E01B: (within /lib/libdl-2.8.so) ==29459== by 0x434DCC9: dlclose (in /lib/libdl-2.8.so) ==29459== by 0x80F5CF7: load_dynamic_module (loader.c:401) ==29459== by 0x80F6C2D: load_resource (loader.c:663) ==29459== by 0x80F763A: load_modules (loader.c:878) ==29459== by 0x807F899: main (asterisk.c:3391) ==29459== ==29459== Invalid read of size 1 ==29459== at 0x401610E: memcpy (in /lib/ld-2.8.so) ==29459== by 0x40132E2: _dl_close (dl-close.c:725) ==29459== by 0x434DC93: (within /lib/libdl-2.8.so) ==29459== by 0x400DB15: _dl_catch_error (dl-error.c:178) ==29459== by 0x434E01B: (within /lib/libdl-2.8.so) ==29459== by 0x434DCC9: dlclose (in /lib/libdl-2.8.so) ==29459== by 0x80F5CF7: load_dynamic_module (loader.c:401) ==29459== by 0x80F6C2D: load_resource (loader.c:663) ==29459== by 0x80F763A: load_modules (loader.c:878) ==29459== by 0x807F899: main (asterisk.c:3391) ==29459== Address 0x4412758 is 0 bytes inside a block of size 44 free'd ==29459== at 0x40218FA: free (vg_replace_malloc.c:323) ==29459== by 0x4012D5B: _dl_close_worker (dl-close.c:636) ==29459== by 0x40132B6: _dl_close (dl-close.c:730) ==29459== by 0x434DC93: (within /lib/libdl-2.8.so) ==29459== by 0x400DB15: _dl_catch_error (dl-error.c:178) ==29459== by 0x434E01B: (within /lib/libdl-2.8.so) ==29459== by 0x434DCC9: dlclose (in /lib/libdl-2.8.so) ==29459== by 0x80F5CF7: load_dynamic_module (loader.c:401) ==29459== by 0x80F6C2D: load_resource (loader.c:663) ==29459== by 0x80F763A: load_modules (loader.c:878) ==29459== by 0x807F899: main (asterisk.c:3391) ==29459== ==29459== Invalid read of size 1 ==29459== at 0x401615C: memcpy (in /lib/ld-2.8.so) ==29459== by 0x40132E2: _dl_close (dl-close.c:725) ==29459== by 0x434DC93: (within /lib/libdl-2.8.so) ==29459== by 0x400DB15: _dl_catch_error (dl-error.c:178) ==29459== by 0x434E01B: (within /lib/libdl-2.8.so) ==29459== by 0x434DCC9: dlclose (in /lib/libdl-2.8.so) ==29459== by 0x80F5CF7: load_dynamic_module (loader.c:401) ==29459== by 0x80F6C2D: load_resource (loader.c:663) ==29459== by 0x80F763A: load_modules (loader.c:878) ==29459== by 0x807F899: main (asterisk.c:3391) ==29459== Address 0x4412779 is 33 bytes inside a block of size 44 free'd ==29459== at 0x40218FA: free (vg_replace_malloc.c:323) ==29459== by 0x4012D5B: _dl_close_worker (dl-close.c:636) ==29459== by 0x40132B6: _dl_close (dl-close.c:730) ==29459== by 0x434DC93: (within /lib/libdl-2.8.so) ==29459== by 0x400DB15: _dl_catch_error (dl-error.c:178) ==29459== by 0x434E01B: (within /lib/libdl-2.8.so) ==29459== by 0x434DCC9: dlclose (in /lib/libdl-2.8.so) ==29459== by 0x80F5CF7: load_dynamic_module (loader.c:401) ==29459== by 0x80F6C2D: load_resource (loader.c:663) ==29459== by 0x80F763A: load_modules (loader.c:878) ==29459== by 0x807F899: main (asterisk.c:3391) ==29459== ==29459== Source and destination overlap in memcpy(0xBEE6C61C, 0xBEE6C6BC, 428) ==29459== at 0x40236C9: memcpy (mc_replace_strmem.c:402) ==29459== by 0x4C0084E: Decode (iLBC_decode.c:254) ==29459== by 0x4C012F3: iLBC_decode (iLBC_decode.c:508) ==29459== by 0x4BFFE4F: ilbctolin_framein (codec_ilbc.c:108) ==29459== by 0x8167F4D: framein (translate.c:193) ==29459== by 0x8169358: calc_cost (translate.c:420) ==29459== by 0x816A670: __ast_register_translator (translate.c:672) ==29459== by 0x4C00134: load_module (codec_ilbc.c:200) ==29459== by 0x80F6D6C: load_resource (loader.c:694) ==29459== by 0x80F779C: load_modules (loader.c:898) ==29459== by 0x807F899: main (asterisk.c:3391) ==29459== ==29459== Source and destination overlap in memcpy(0xBEE6C61C, 0xBEE6C6BC, 428) ==29459== at 0x40236C9: memcpy (mc_replace_strmem.c:402) ==29459== by 0x4C00A05: Decode (iLBC_decode.c:302) ==29459== by 0x4C012F3: iLBC_decode (iLBC_decode.c:508) ==29459== by 0x4BFFE4F: ilbctolin_framein (codec_ilbc.c:108) ==29459== by 0x8167F4D: framein (translate.c:193) ==29459== by 0x8169358: calc_cost (translate.c:420) ==29459== by 0x816A670: __ast_register_translator (translate.c:672) ==29459== by 0x4C00134: load_module (codec_ilbc.c:200) ==29459== by 0x80F6D6C: load_resource (loader.c:694) ==29459== by 0x80F779C: load_modules (loader.c:898) ==29459== by 0x807F899: main (asterisk.c:3391) ==29459== ==29459== Source and destination overlap in memcpy(0xBEE6CE20, 0xBEE6CEC0, 428) ==29459== at 0x40236C9: memcpy (mc_replace_strmem.c:402) ==29459== by 0x4C02458: iLBC_encode (iLBC_encode.c:311) ==29459== by 0x4C0001D: lintoilbc_frameout (codec_ilbc.c:148) ==29459== by 0x8169397: calc_cost (translate.c:422) ==29459== by 0x816A670: __ast_register_translator (translate.c:672) ==29459== by 0x4C00157: load_module (codec_ilbc.c:202) ==29459== by 0x80F6D6C: load_resource (loader.c:694) ==29459== by 0x80F779C: load_modules (loader.c:898) ==29459== by 0x807F899: main (asterisk.c:3391) ==29459== ==29459== Process terminating with default action of signal 8 (SIGFPE): dumping core ==29459== Integer divide by zero at address 0x63228F08 ==29459== at 0x81309A0: ast_rtp_new_with_bindaddr (rtp.c:2460) ==29459== by 0x4ABC552: sip_alloc (chan_sip.c:6292) ==29459== by 0x4ABDE34: find_call (chan_sip.c:6520) ==29459== by 0x4AFF558: handle_request_do (chan_sip.c:20026) ==29459== by 0x4AFF2D4: sipsock_read (chan_sip.c:19976) ==29459== by 0x80F2698: ast_io_wait (io.c:287) ==29459== by 0x4B00CF4: do_monitor (chan_sip.c:20461) ==29459== by 0x8172B91: dummy_start (utils.c:1024) ==29459== by 0x4358314: start_thread (in /lib/i686/libpthread-2.8.so) ==29459== by 0x42D7DDD: clone (in /lib/i686/libc-2.8.so) ==29459== ==29459== ERROR SUMMARY: 3977 errors from 8 contexts (suppressed: 1065 from 3) ==29459== malloc/free: in use at exit: 706,163 bytes in 2,517 blocks. ==29459== malloc/free: 6,189 allocs, 3,672 frees, 1,837,838 bytes allocated. ==29459== For counts of detected errors, rerun with: -v ==29459== searching for pointers to 2,517 not-freed blocks. ==29459== checked 3,851,812 bytes. ==29459== ==29459== LEAK SUMMARY: ==29459== definitely lost: 1,441 bytes in 32 blocks. ==29459== possibly lost: 1,360 bytes in 10 blocks. ==29459== still reachable: 703,362 bytes in 2,475 blocks. ==29459== suppressed: 0 bytes in 0 blocks. ==29459== Rerun with --leak-check=full to see details of leaked memory.