==14529== Memcheck, a memory error detector.
==14529== Copyright (C) 2002-2007, and GNU GPL'd, by Julian Seward et al.
==14529== Using LibVEX rev 1854, a library for dynamic binary translation.
==14529== Copyright (C) 2004-2007, and GNU GPL'd, by OpenWorks LLP.
==14529== Using valgrind-3.3.1-Debian, a dynamic binary instrumentation framework.
==14529== Copyright (C) 2000-2007, and GNU GPL'd, by Julian Seward et al.
==14529== For more details, rerun with: -v
==14529== 
==14529== My PID = 14529, parent PID = 8928.  Prog and args are:
==14529==    /usr/sbin/asterisk-vm
==14529==    -f
==14529==    -U
==14529==    asterisk
==14529==    -G
==14529==    asterisk
==14529==    -vvvvcg
==14529==    -c
==14529== 
==14535== Warning: invalid file descriptor 1014 in syscall close()
==14535== Warning: invalid file descriptor 1015 in syscall close()
==14535== Warning: invalid file descriptor 1016 in syscall close()
==14535==    Use --log-fd=<number> to select an alternative log fd.
==14535== Warning: invalid file descriptor 1017 in syscall close()
==14535== Warning: invalid file descriptor 1018 in syscall close()
==14529== Invalid read of size 1
==14529==    at 0x401323D: _dl_close (in /lib/ld-2.7.so)
==14529==    by 0x4027CD3: dlclose_doit (dlclose.c:37)
==14529==    by 0x400DA15: _dl_catch_error (in /lib/ld-2.7.so)
==14529==    by 0x40280EB: _dlerror_run (dlerror.c:164)
==14529==    by 0x4027D09: dlclose (dlclose.c:48)
==14529==    by 0x80AE7AB: load_dynamic_module (loader.c:385)
==14529==    by 0x80AF454: load_resource (loader.c:650)
==14529==    by 0x80AFBD9: load_modules (loader.c:878)
==14529==    by 0x806F2B8: main (asterisk.c:3149)
==14529==  Address 0x421af90 is 512 bytes inside a block of size 652 free'd
==14529==    at 0x4022B8A: free (vg_replace_malloc.c:323)
==14529==    by 0x4012DEE: _dl_close_worker (in /lib/ld-2.7.so)
==14529==    by 0x4013266: _dl_close (in /lib/ld-2.7.so)
==14529==    by 0x4027CD3: dlclose_doit (dlclose.c:37)
==14529==    by 0x400DA15: _dl_catch_error (in /lib/ld-2.7.so)
==14529==    by 0x40280EB: _dlerror_run (dlerror.c:164)
==14529==    by 0x4027D09: dlclose (dlclose.c:48)
==14529==    by 0x80AE7AB: load_dynamic_module (loader.c:385)
==14529==    by 0x80AF454: load_resource (loader.c:650)
==14529==    by 0x80AFBD9: load_modules (loader.c:878)
==14529==    by 0x806F2B8: main (asterisk.c:3149)
==14529== 
==14529== Invalid read of size 4
==14529==    at 0x4013246: _dl_close (in /lib/ld-2.7.so)
==14529==    by 0x4027CD3: dlclose_doit (dlclose.c:37)
==14529==    by 0x400DA15: _dl_catch_error (in /lib/ld-2.7.so)
==14529==    by 0x40280EB: _dlerror_run (dlerror.c:164)
==14529==    by 0x4027D09: dlclose (dlclose.c:48)
==14529==    by 0x80AE7AB: load_dynamic_module (loader.c:385)
==14529==    by 0x80AF454: load_resource (loader.c:650)
==14529==    by 0x80AFBD9: load_modules (loader.c:878)
==14529==    by 0x806F2B8: main (asterisk.c:3149)
==14529==  Address 0x421af20 is 400 bytes inside a block of size 652 free'd
==14529==    at 0x4022B8A: free (vg_replace_malloc.c:323)
==14529==    by 0x4012DEE: _dl_close_worker (in /lib/ld-2.7.so)
==14529==    by 0x4013266: _dl_close (in /lib/ld-2.7.so)
==14529==    by 0x4027CD3: dlclose_doit (dlclose.c:37)
==14529==    by 0x400DA15: _dl_catch_error (in /lib/ld-2.7.so)
==14529==    by 0x40280EB: _dlerror_run (dlerror.c:164)
==14529==    by 0x4027D09: dlclose (dlclose.c:48)
==14529==    by 0x80AE7AB: load_dynamic_module (loader.c:385)
==14529==    by 0x80AF454: load_resource (loader.c:650)
==14529==    by 0x80AFBD9: load_modules (loader.c:878)
==14529==    by 0x806F2B8: main (asterisk.c:3149)
==14529== 
==14529== Invalid read of size 4
==14529==    at 0x40132B0: _dl_close (in /lib/ld-2.7.so)
==14529==    by 0x4027CD3: dlclose_doit (dlclose.c:37)
==14529==    by 0x400DA15: _dl_catch_error (in /lib/ld-2.7.so)
==14529==    by 0x40280EB: _dlerror_run (dlerror.c:164)
==14529==    by 0x4027D09: dlclose (dlclose.c:48)
==14529==    by 0x80AE7AB: load_dynamic_module (loader.c:385)
==14529==    by 0x80AF454: load_resource (loader.c:650)
==14529==    by 0x80AFBD9: load_modules (loader.c:878)
==14529==    by 0x806F2B8: main (asterisk.c:3149)
==14529==  Address 0x421ad94 is 4 bytes inside a block of size 652 free'd
==14529==    at 0x4022B8A: free (vg_replace_malloc.c:323)
==14529==    by 0x4012DEE: _dl_close_worker (in /lib/ld-2.7.so)
==14529==    by 0x4013266: _dl_close (in /lib/ld-2.7.so)
==14529==    by 0x4027CD3: dlclose_doit (dlclose.c:37)
==14529==    by 0x400DA15: _dl_catch_error (in /lib/ld-2.7.so)
==14529==    by 0x40280EB: _dlerror_run (dlerror.c:164)
==14529==    by 0x4027D09: dlclose (dlclose.c:48)
==14529==    by 0x80AE7AB: load_dynamic_module (loader.c:385)
==14529==    by 0x80AF454: load_resource (loader.c:650)
==14529==    by 0x80AFBD9: load_modules (loader.c:878)
==14529==    by 0x806F2B8: main (asterisk.c:3149)
==14529== 
==14529== Invalid read of size 1
==14529==    at 0x4024498: strlen (mc_replace_strmem.c:243)
==14529==    by 0x400DAFB: _dl_signal_error (in /lib/ld-2.7.so)
==14529==    by 0x40132C5: _dl_close (in /lib/ld-2.7.so)
==14529==    by 0x4027CD3: dlclose_doit (dlclose.c:37)
==14529==    by 0x400DA15: _dl_catch_error (in /lib/ld-2.7.so)
==14529==    by 0x40280EB: _dlerror_run (dlerror.c:164)
==14529==    by 0x4027D09: dlclose (dlclose.c:48)
==14529==    by 0x80AE7AB: load_dynamic_module (loader.c:385)
==14529==    by 0x80AF454: load_resource (loader.c:650)
==14529==    by 0x80AFBD9: load_modules (loader.c:878)
==14529==    by 0x806F2B8: main (asterisk.c:3149)
==14529==  Address 0x421ad30 is 0 bytes inside a block of size 48 free'd
==14529==    at 0x4022B8A: free (vg_replace_malloc.c:323)
==14529==    by 0x4012D70: _dl_close_worker (in /lib/ld-2.7.so)
==14529==    by 0x4013266: _dl_close (in /lib/ld-2.7.so)
==14529==    by 0x4027CD3: dlclose_doit (dlclose.c:37)
==14529==    by 0x400DA15: _dl_catch_error (in /lib/ld-2.7.so)
==14529==    by 0x40280EB: _dlerror_run (dlerror.c:164)
==14529==    by 0x4027D09: dlclose (dlclose.c:48)
==14529==    by 0x80AE7AB: load_dynamic_module (loader.c:385)
==14529==    by 0x80AF454: load_resource (loader.c:650)
==14529==    by 0x80AFBD9: load_modules (loader.c:878)
==14529==    by 0x806F2B8: main (asterisk.c:3149)
==14529== 
==14529== Invalid read of size 1
==14529==    at 0x40244A3: strlen (mc_replace_strmem.c:243)
==14529==    by 0x400DAFB: _dl_signal_error (in /lib/ld-2.7.so)
==14529==    by 0x40132C5: _dl_close (in /lib/ld-2.7.so)
==14529==    by 0x4027CD3: dlclose_doit (dlclose.c:37)
==14529==    by 0x400DA15: _dl_catch_error (in /lib/ld-2.7.so)
==14529==    by 0x40280EB: _dlerror_run (dlerror.c:164)
==14529==    by 0x4027D09: dlclose (dlclose.c:48)
==14529==    by 0x80AE7AB: load_dynamic_module (loader.c:385)
==14529==    by 0x80AF454: load_resource (loader.c:650)
==14529==    by 0x80AFBD9: load_modules (loader.c:878)
==14529==    by 0x806F2B8: main (asterisk.c:3149)
==14529==  Address 0x421ad31 is 1 bytes inside a block of size 48 free'd
==14529==    at 0x4022B8A: free (vg_replace_malloc.c:323)
==14529==    by 0x4012D70: _dl_close_worker (in /lib/ld-2.7.so)
==14529==    by 0x4013266: _dl_close (in /lib/ld-2.7.so)
==14529==    by 0x4027CD3: dlclose_doit (dlclose.c:37)
==14529==    by 0x400DA15: _dl_catch_error (in /lib/ld-2.7.so)
==14529==    by 0x40280EB: _dlerror_run (dlerror.c:164)
==14529==    by 0x4027D09: dlclose (dlclose.c:48)
==14529==    by 0x80AE7AB: load_dynamic_module (loader.c:385)
==14529==    by 0x80AF454: load_resource (loader.c:650)
==14529==    by 0x80AFBD9: load_modules (loader.c:878)
==14529==    by 0x806F2B8: main (asterisk.c:3149)
==14529== 
==14529== Invalid read of size 1
==14529==    at 0x4015CA7: memcpy (in /lib/ld-2.7.so)
==14529==    by 0x400DB59: _dl_signal_error (in /lib/ld-2.7.so)
==14529==    by 0x40132C5: _dl_close (in /lib/ld-2.7.so)
==14529==    by 0x4027CD3: dlclose_doit (dlclose.c:37)
==14529==    by 0x400DA15: _dl_catch_error (in /lib/ld-2.7.so)
==14529==    by 0x40280EB: _dlerror_run (dlerror.c:164)
==14529==    by 0x4027D09: dlclose (dlclose.c:48)
==14529==    by 0x80AE7AB: load_dynamic_module (loader.c:385)
==14529==    by 0x80AF454: load_resource (loader.c:650)
==14529==    by 0x80AFBD9: load_modules (loader.c:878)
==14529==    by 0x806F2B8: main (asterisk.c:3149)
==14529==  Address 0x421ad30 is 0 bytes inside a block of size 48 free'd
==14529==    at 0x4022B8A: free (vg_replace_malloc.c:323)
==14529==    by 0x4012D70: _dl_close_worker (in /lib/ld-2.7.so)
==14529==    by 0x4013266: _dl_close (in /lib/ld-2.7.so)
==14529==    by 0x4027CD3: dlclose_doit (dlclose.c:37)
==14529==    by 0x400DA15: _dl_catch_error (in /lib/ld-2.7.so)
==14529==    by 0x40280EB: _dlerror_run (dlerror.c:164)
==14529==    by 0x4027D09: dlclose (dlclose.c:48)
==14529==    by 0x80AE7AB: load_dynamic_module (loader.c:385)
==14529==    by 0x80AF454: load_resource (loader.c:650)
==14529==    by 0x80AFBD9: load_modules (loader.c:878)
==14529==    by 0x806F2B8: main (asterisk.c:3149)
==14529== 
==14529== Invalid read of size 1
==14529==    at 0x4015CB7: memcpy (in /lib/ld-2.7.so)
==14529==    by 0x400DB59: _dl_signal_error (in /lib/ld-2.7.so)
==14529==    by 0x40132C5: _dl_close (in /lib/ld-2.7.so)
==14529==    by 0x4027CD3: dlclose_doit (dlclose.c:37)
==14529==    by 0x400DA15: _dl_catch_error (in /lib/ld-2.7.so)
==14529==    by 0x40280EB: _dlerror_run (dlerror.c:164)
==14529==    by 0x4027D09: dlclose (dlclose.c:48)
==14529==    by 0x80AE7AB: load_dynamic_module (loader.c:385)
==14529==    by 0x80AF454: load_resource (loader.c:650)
==14529==    by 0x80AFBD9: load_modules (loader.c:878)
==14529==    by 0x806F2B8: main (asterisk.c:3149)
==14529==  Address 0x421ad5d is 45 bytes inside a block of size 48 free'd
==14529==    at 0x4022B8A: free (vg_replace_malloc.c:323)
==14529==    by 0x4012D70: _dl_close_worker (in /lib/ld-2.7.so)
==14529==    by 0x4013266: _dl_close (in /lib/ld-2.7.so)
==14529==    by 0x4027CD3: dlclose_doit (dlclose.c:37)
==14529==    by 0x400DA15: _dl_catch_error (in /lib/ld-2.7.so)
==14529==    by 0x40280EB: _dlerror_run (dlerror.c:164)
==14529==    by 0x4027D09: dlclose (dlclose.c:48)
==14529==    by 0x80AE7AB: load_dynamic_module (loader.c:385)
==14529==    by 0x80AF454: load_resource (loader.c:650)
==14529==    by 0x80AFBD9: load_modules (loader.c:878)
==14529==    by 0x806F2B8: main (asterisk.c:3149)
==14529== 
==14529== Source and destination overlap in memcpy(0xBEC91760, 0xBEC91800, 428)
==14529==    at 0x4024959: memcpy (mc_replace_strmem.c:402)
==14529==    by 0x4CB1781: Decode (iLBC_decode.c:254)
==14529==    by 0x4CB28AB: iLBC_decode (iLBC_decode.c:508)
==14529==    by 0x4CB0F1F: ??? (codec_ilbc.c:147)
==14529==    by 0x80FAE23: framein (translate.c:201)
==14529==    by 0x80FC2DD: calc_cost (translate.c:427)
==14529==    by 0x80FCA05: __ast_register_translator (translate.c:741)
==14529==    by 0x4CB1263: ??? (codec_ilbc.c:239)
==14529==    by 0x80AF433: load_resource (loader.c:676)
==14529==    by 0x80AFCE8: load_modules (loader.c:897)
==14529==    by 0x806F2B8: main (asterisk.c:3149)
==14529== 
==14529== Source and destination overlap in memcpy(0xBEC91760, 0xBEC91800, 428)
==14529==    at 0x4024959: memcpy (mc_replace_strmem.c:402)
==14529==    by 0x4CB1960: Decode (iLBC_decode.c:302)
==14529==    by 0x4CB28AB: iLBC_decode (iLBC_decode.c:508)
==14529==    by 0x4CB0F1F: ??? (codec_ilbc.c:147)
==14529==    by 0x80FAE23: framein (translate.c:201)
==14529==    by 0x80FC2DD: calc_cost (translate.c:427)
==14529==    by 0x80FCA05: __ast_register_translator (translate.c:741)
==14529==    by 0x4CB1263: ??? (codec_ilbc.c:239)
==14529==    by 0x80AF433: load_resource (loader.c:676)
==14529==    by 0x80AFCE8: load_modules (loader.c:897)
==14529==    by 0x806F2B8: main (asterisk.c:3149)
==14529== 
==14529== Source and destination overlap in memcpy(0xBEC92820, 0xBEC928C0, 428)
==14529==    at 0x4024959: memcpy (mc_replace_strmem.c:402)
==14529==    by 0x4CB3625: iLBC_encode (iLBC_encode.c:311)
==14529==    by 0x4CB110E: ??? (codec_ilbc.c:187)
==14529==    by 0x80FC2F4: calc_cost (translate.c:429)
==14529==    by 0x80FCA05: __ast_register_translator (translate.c:741)
==14529==    by 0x4CB1283: ??? (codec_ilbc.c:241)
==14529==    by 0x80AF433: load_resource (loader.c:676)
==14529==    by 0x80AFCE8: load_modules (loader.c:897)
==14529==    by 0x806F2B8: main (asterisk.c:3149)
==14529== 
==14529== Source and destination overlap in memcpy(0xBEC92820, 0xBEC928C0, 428)
==14529==    at 0x4024959: memcpy (mc_replace_strmem.c:402)
==14529==    by 0x4CB39D9: iLBC_encode (iLBC_encode.c:389)
==14529==    by 0x4CB110E: ??? (codec_ilbc.c:187)
==14529==    by 0x80FC2F4: calc_cost (translate.c:429)
==14529==    by 0x80FCA05: __ast_register_translator (translate.c:741)
==14529==    by 0x4CB1283: ??? (codec_ilbc.c:241)
==14529==    by 0x80AF433: load_resource (loader.c:676)
==14529==    by 0x80AFCE8: load_modules (loader.c:897)
==14529==    by 0x806F2B8: main (asterisk.c:3149)
==14529== Warning: invalid file descriptor -1 in syscall read()
==14529== Warning: invalid file descriptor -1 in syscall read()
==14529== 
==14529== Conditional jump or move depends on uninitialised value(s)
==14529==    at 0x5359FDE: speex_decode_int (in /usr/lib/libspeex.so.1.2.0)
==14529==    by 0x533F1BD: speextolin_framein (codec_speex.c:233)
==14529==    by 0x80FAE23: framein (translate.c:201)
==14529==    by 0x80FC2DD: calc_cost (translate.c:427)
==14529==    by 0x80FCA05: __ast_register_translator (translate.c:741)
==14529==    by 0x53401A8: load_module (codec_speex.c:509)
==14529==    by 0x80AF433: load_resource (loader.c:676)
==14529==    by 0x80AFCE8: load_modules (loader.c:897)
==14529==    by 0x806F2B8: main (asterisk.c:3149)
==14529== 
==14529== Conditional jump or move depends on uninitialised value(s)
==14529==    at 0x5359FE7: speex_decode_int (in /usr/lib/libspeex.so.1.2.0)
==14529==    by 0x533F1BD: speextolin_framein (codec_speex.c:233)
==14529==    by 0x80FAE23: framein (translate.c:201)
==14529==    by 0x80FC2DD: calc_cost (translate.c:427)
==14529==    by 0x80FCA05: __ast_register_translator (translate.c:741)
==14529==    by 0x53401A8: load_module (codec_speex.c:509)
==14529==    by 0x80AF433: load_resource (loader.c:676)
==14529==    by 0x80AFCE8: load_modules (loader.c:897)
==14529==    by 0x806F2B8: main (asterisk.c:3149)
==14529== 
==14529== Thread 19:
==14529== Invalid read of size 4
==14529==    at 0x51DE2A0: messagecount (app_voicemail.c:1204)
==14529==    by 0x51DE682: has_voicemail (app_voicemail.c:1425)
==14529==    by 0x51F1051: vm_execmain (app_voicemail.c:7759)
==14529==    by 0x80CEAF6: pbx_extension_helper (pbx.c:537)
==14529==    by 0x80D0640: __ast_pbx_run (pbx.c:2320)
==14529==    by 0x80D16CD: pbx_thread (pbx.c:2627)
==14529==    by 0x8100E6F: dummy_start (utils.c:856)
==14529==    by 0x4030F3A: start_thread (pthread_create.c:297)
==14529==    by 0x417FBED: clone (in /usr/lib/debug/libc-2.7.so)
==14529==  Address 0x4f428f49 is not stack'd, malloc'd or (recently) free'd
==14529== 
==14529== Process terminating with default action of signal 11 (SIGSEGV): dumping core
==14529==  Access not within mapped region at address 0x4F428F49
==14529==    at 0x51DE2A0: messagecount (app_voicemail.c:1204)
==14529==    by 0x51DE682: has_voicemail (app_voicemail.c:1425)
==14529==    by 0x51F1051: vm_execmain (app_voicemail.c:7759)
==14529==    by 0x80CEAF6: pbx_extension_helper (pbx.c:537)
==14529==    by 0x80D0640: __ast_pbx_run (pbx.c:2320)
==14529==    by 0x80D16CD: pbx_thread (pbx.c:2627)
==14529==    by 0x8100E6F: dummy_start (utils.c:856)
==14529==    by 0x4030F3A: start_thread (pthread_create.c:297)
==14529==    by 0x417FBED: clone (in /usr/lib/debug/libc-2.7.so)
==14529== 
==14529== ERROR SUMMARY: 23287 errors from 14 contexts (suppressed: 2187 from 2)
==14529== malloc/free: in use at exit: 600,145 bytes in 5,854 blocks.
==14529== malloc/free: 12,388 allocs, 6,534 frees, 1,769,500 bytes allocated.
==14529== For counts of detected errors, rerun with: -v
==14529== searching for pointers to 5,854 not-freed blocks.
==14529== checked 6,848,876 bytes.
==14529== 
==14529== LEAK SUMMARY:
==14529==    definitely lost: 1,760 bytes in 24 blocks.
==14529==      possibly lost: 3,052 bytes in 19 blocks.
==14529==    still reachable: 595,333 bytes in 5,811 blocks.
==14529==         suppressed: 0 bytes in 0 blocks.
==14529== Rerun with --leak-check=full to see details of leaked memory.