==3326== Memcheck, a memory error detector. ==3326== Copyright (C) 2002-2006, and GNU GPL'd, by Julian Seward et al. ==3326== Using LibVEX rev 1658, a library for dynamic binary translation. ==3326== Copyright (C) 2004-2006, and GNU GPL'd, by OpenWorks LLP. ==3326== Using valgrind-3.2.1, a dynamic binary instrumentation framework. ==3326== Copyright (C) 2000-2006, and GNU GPL'd, by Julian Seward et al. ==3326== For more details, rerun with: -v ==3326== ==3326== My PID = 3326, parent PID = 25655. Prog and args are: ==3326== asterisk ==3326== -vvvvcg ==3326== ==3326== Invalid read of size 1 ==3326== at 0x2C944D: _dl_close (in /lib/ld-2.5.so) ==3326== by 0x2D4CE3: dlclose_doit (in /lib/libdl-2.5.so) ==3326== by 0x2C3E35: _dl_catch_error (in /lib/ld-2.5.so) ==3326== by 0x2D52CB: _dlerror_run (in /lib/libdl-2.5.so) ==3326== by 0x2D4D19: dlclose (in /lib/libdl-2.5.so) ==3326== by 0x80DA922: load_dynamic_module (loader.c:401) ==3326== by 0x80DB412: load_resource (loader.c:663) ==3326== by 0x80DBD90: load_modules (loader.c:878) ==3326== by 0x807D049: main (asterisk.c:3586) ==3326== Address 0x4E156DC is 516 bytes inside a block of size 653 free'd ==3326== at 0x4004FDA: free (vg_replace_malloc.c:233) ==3326== by 0x2C8FF2: _dl_close_worker (in /lib/ld-2.5.so) ==3326== by 0x2C9476: _dl_close (in /lib/ld-2.5.so) ==3326== by 0x2D4CE3: dlclose_doit (in /lib/libdl-2.5.so) ==3326== by 0x2C3E35: _dl_catch_error (in /lib/ld-2.5.so) ==3326== by 0x2D52CB: _dlerror_run (in /lib/libdl-2.5.so) ==3326== by 0x2D4D19: dlclose (in /lib/libdl-2.5.so) ==3326== by 0x80DA922: load_dynamic_module (loader.c:401) ==3326== by 0x80DB412: load_resource (loader.c:663) ==3326== by 0x80DBD90: load_modules (loader.c:878) ==3326== by 0x807D049: main (asterisk.c:3586) ==3326== ==3326== Invalid read of size 4 ==3326== at 0x2C9456: _dl_close (in /lib/ld-2.5.so) ==3326== by 0x2D4CE3: dlclose_doit (in /lib/libdl-2.5.so) ==3326== by 0x2C3E35: _dl_catch_error (in /lib/ld-2.5.so) ==3326== by 0x2D52CB: _dlerror_run (in /lib/libdl-2.5.so) ==3326== by 0x2D4D19: dlclose (in /lib/libdl-2.5.so) ==3326== by 0x80DA922: load_dynamic_module (loader.c:401) ==3326== by 0x80DB412: load_resource (loader.c:663) ==3326== by 0x80DBD90: load_modules (loader.c:878) ==3326== by 0x807D049: main (asterisk.c:3586) ==3326== Address 0x4E15660 is 392 bytes inside a block of size 653 free'd ==3326== at 0x4004FDA: free (vg_replace_malloc.c:233) ==3326== by 0x2C8FF2: _dl_close_worker (in /lib/ld-2.5.so) ==3326== by 0x2C9476: _dl_close (in /lib/ld-2.5.so) ==3326== by 0x2D4CE3: dlclose_doit (in /lib/libdl-2.5.so) ==3326== by 0x2C3E35: _dl_catch_error (in /lib/ld-2.5.so) ==3326== by 0x2D52CB: _dlerror_run (in /lib/libdl-2.5.so) ==3326== by 0x2D4D19: dlclose (in /lib/libdl-2.5.so) ==3326== by 0x80DA922: load_dynamic_module (loader.c:401) ==3326== by 0x80DB412: load_resource (loader.c:663) ==3326== by 0x80DBD90: load_modules (loader.c:878) ==3326== by 0x807D049: main (asterisk.c:3586) ==3326== ==3326== Invalid read of size 4 ==3326== at 0x2C948D: _dl_close (in /lib/ld-2.5.so) ==3326== by 0x2D4CE3: dlclose_doit (in /lib/libdl-2.5.so) ==3326== by 0x2C3E35: _dl_catch_error (in /lib/ld-2.5.so) ==3326== by 0x2D52CB: _dlerror_run (in /lib/libdl-2.5.so) ==3326== by 0x2D4D19: dlclose (in /lib/libdl-2.5.so) ==3326== by 0x80DA922: load_dynamic_module (loader.c:401) ==3326== by 0x80DB412: load_resource (loader.c:663) ==3326== by 0x80DBD90: load_modules (loader.c:878) ==3326== by 0x807D049: main (asterisk.c:3586) ==3326== Address 0x4E154DC is 4 bytes inside a block of size 653 free'd ==3326== at 0x4004FDA: free (vg_replace_malloc.c:233) ==3326== by 0x2C8FF2: _dl_close_worker (in /lib/ld-2.5.so) ==3326== by 0x2C9476: _dl_close (in /lib/ld-2.5.so) ==3326== by 0x2D4CE3: dlclose_doit (in /lib/libdl-2.5.so) ==3326== by 0x2C3E35: _dl_catch_error (in /lib/ld-2.5.so) ==3326== by 0x2D52CB: _dlerror_run (in /lib/libdl-2.5.so) ==3326== by 0x2D4D19: dlclose (in /lib/libdl-2.5.so) ==3326== by 0x80DA922: load_dynamic_module (loader.c:401) ==3326== by 0x80DB412: load_resource (loader.c:663) ==3326== by 0x80DBD90: load_modules (loader.c:878) ==3326== by 0x807D049: main (asterisk.c:3586) ==3326== ==3326== Invalid read of size 1 ==3326== at 0x4006258: strlen (mc_replace_strmem.c:247) ==3326== by 0x2C3F31: _dl_signal_error (in /lib/ld-2.5.so) ==3326== by 0x2C94A2: _dl_close (in /lib/ld-2.5.so) ==3326== by 0x2D4CE3: dlclose_doit (in /lib/libdl-2.5.so) ==3326== by 0x2C3E35: _dl_catch_error (in /lib/ld-2.5.so) ==3326== by 0x2D52CB: _dlerror_run (in /lib/libdl-2.5.so) ==3326== by 0x2D4D19: dlclose (in /lib/libdl-2.5.so) ==3326== by 0x80DA922: load_dynamic_module (loader.c:401) ==3326== by 0x80DB412: load_resource (loader.c:663) ==3326== by 0x80DBD90: load_modules (loader.c:878) ==3326== by 0x807D049: main (asterisk.c:3586) ==3326== Address 0x4E15478 is 0 bytes inside a block of size 45 free'd ==3326== at 0x4004FDA: free (vg_replace_malloc.c:233) ==3326== by 0x2C8F70: _dl_close_worker (in /lib/ld-2.5.so) ==3326== by 0x2C9476: _dl_close (in /lib/ld-2.5.so) ==3326== by 0x2D4CE3: dlclose_doit (in /lib/libdl-2.5.so) ==3326== by 0x2C3E35: _dl_catch_error (in /lib/ld-2.5.so) ==3326== by 0x2D52CB: _dlerror_run (in /lib/libdl-2.5.so) ==3326== by 0x2D4D19: dlclose (in /lib/libdl-2.5.so) ==3326== by 0x80DA922: load_dynamic_module (loader.c:401) ==3326== by 0x80DB412: load_resource (loader.c:663) ==3326== by 0x80DBD90: load_modules (loader.c:878) ==3326== by 0x807D049: main (asterisk.c:3586) ==3326== ==3326== Invalid read of size 1 ==3326== at 0x4006263: strlen (mc_replace_strmem.c:247) ==3326== by 0x2C3F31: _dl_signal_error (in /lib/ld-2.5.so) ==3326== by 0x2C94A2: _dl_close (in /lib/ld-2.5.so) ==3326== by 0x2D4CE3: dlclose_doit (in /lib/libdl-2.5.so) ==3326== by 0x2C3E35: _dl_catch_error (in /lib/ld-2.5.so) ==3326== by 0x2D52CB: _dlerror_run (in /lib/libdl-2.5.so) ==3326== by 0x2D4D19: dlclose (in /lib/libdl-2.5.so) ==3326== by 0x80DA922: load_dynamic_module (loader.c:401) ==3326== by 0x80DB412: load_resource (loader.c:663) ==3326== by 0x80DBD90: load_modules (loader.c:878) ==3326== by 0x807D049: main (asterisk.c:3586) ==3326== Address 0x4E15479 is 1 bytes inside a block of size 45 free'd ==3326== at 0x4004FDA: free (vg_replace_malloc.c:233) ==3326== by 0x2C8F70: _dl_close_worker (in /lib/ld-2.5.so) ==3326== by 0x2C9476: _dl_close (in /lib/ld-2.5.so) ==3326== by 0x2D4CE3: dlclose_doit (in /lib/libdl-2.5.so) ==3326== by 0x2C3E35: _dl_catch_error (in /lib/ld-2.5.so) ==3326== by 0x2D52CB: _dlerror_run (in /lib/libdl-2.5.so) ==3326== by 0x2D4D19: dlclose (in /lib/libdl-2.5.so) ==3326== by 0x80DA922: load_dynamic_module (loader.c:401) ==3326== by 0x80DB412: load_resource (loader.c:663) ==3326== by 0x80DBD90: load_modules (loader.c:878) ==3326== by 0x807D049: main (asterisk.c:3586) ==3326== ==3326== Invalid read of size 1 ==3326== at 0x2CBD65: memcpy (in /lib/ld-2.5.so) ==3326== by 0x2C94A2: _dl_close (in /lib/ld-2.5.so) ==3326== by 0x2D4CE3: dlclose_doit (in /lib/libdl-2.5.so) ==3326== by 0x2C3E35: _dl_catch_error (in /lib/ld-2.5.so) ==3326== by 0x2D52CB: _dlerror_run (in /lib/libdl-2.5.so) ==3326== by 0x2D4D19: dlclose (in /lib/libdl-2.5.so) ==3326== by 0x80DA922: load_dynamic_module (loader.c:401) ==3326== by 0x80DB412: load_resource (loader.c:663) ==3326== by 0x80DBD90: load_modules (loader.c:878) ==3326== by 0x807D049: main (asterisk.c:3586) ==3326== Address 0x4E15478 is 0 bytes inside a block of size 45 free'd ==3326== at 0x4004FDA: free (vg_replace_malloc.c:233) ==3326== by 0x2C8F70: _dl_close_worker (in /lib/ld-2.5.so) ==3326== by 0x2C9476: _dl_close (in /lib/ld-2.5.so) ==3326== by 0x2D4CE3: dlclose_doit (in /lib/libdl-2.5.so) ==3326== by 0x2C3E35: _dl_catch_error (in /lib/ld-2.5.so) ==3326== by 0x2D52CB: _dlerror_run (in /lib/libdl-2.5.so) ==3326== by 0x2D4D19: dlclose (in /lib/libdl-2.5.so) ==3326== by 0x80DA922: load_dynamic_module (loader.c:401) ==3326== by 0x80DB412: load_resource (loader.c:663) ==3326== by 0x80DBD90: load_modules (loader.c:878) ==3326== by 0x807D049: main (asterisk.c:3586) ==3326== ==3326== Invalid read of size 4 ==3326== at 0x2CBD6C: memcpy (in /lib/ld-2.5.so) ==3326== by 0x2C94A2: _dl_close (in /lib/ld-2.5.so) ==3326== by 0x2D4CE3: dlclose_doit (in /lib/libdl-2.5.so) ==3326== by 0x2C3E35: _dl_catch_error (in /lib/ld-2.5.so) ==3326== by 0x2D52CB: _dlerror_run (in /lib/libdl-2.5.so) ==3326== by 0x2D4D19: dlclose (in /lib/libdl-2.5.so) ==3326== by 0x80DA922: load_dynamic_module (loader.c:401) ==3326== by 0x80DB412: load_resource (loader.c:663) ==3326== by 0x80DBD90: load_modules (loader.c:878) ==3326== by 0x807D049: main (asterisk.c:3586) ==3326== Address 0x4E15479 is 1 bytes inside a block of size 45 free'd ==3326== at 0x4004FDA: free (vg_replace_malloc.c:233) ==3326== by 0x2C8F70: _dl_close_worker (in /lib/ld-2.5.so) ==3326== by 0x2C9476: _dl_close (in /lib/ld-2.5.so) ==3326== by 0x2D4CE3: dlclose_doit (in /lib/libdl-2.5.so) ==3326== by 0x2C3E35: _dl_catch_error (in /lib/ld-2.5.so) ==3326== by 0x2D52CB: _dlerror_run (in /lib/libdl-2.5.so) ==3326== by 0x2D4D19: dlclose (in /lib/libdl-2.5.so) ==3326== by 0x80DA922: load_dynamic_module (loader.c:401) ==3326== by 0x80DB412: load_resource (loader.c:663) ==3326== by 0x80DBD90: load_modules (loader.c:878) ==3326== by 0x807D049: main (asterisk.c:3586) ==3326== ==3326== Invalid read of size 2 ==3326== at 0x2CBD6A: memcpy (in /lib/ld-2.5.so) ==3326== by 0x2C94A2: _dl_close (in /lib/ld-2.5.so) ==3326== by 0x2D4CE3: dlclose_doit (in /lib/libdl-2.5.so) ==3326== by 0x2C3E35: _dl_catch_error (in /lib/ld-2.5.so) ==3326== by 0x2D52CB: _dlerror_run (in /lib/libdl-2.5.so) ==3326== by 0x2D4D19: dlclose (in /lib/libdl-2.5.so) ==3326== by 0x80DA922: load_dynamic_module (loader.c:401) ==3326== by 0x80DB412: load_resource (loader.c:663) ==3326== by 0x80DBD90: load_modules (loader.c:878) ==3326== by 0x807D049: main (asterisk.c:3586) ==3326== Address 0x4E15A38 is 0 bytes inside a block of size 38 free'd ==3326== at 0x4004FDA: free (vg_replace_malloc.c:233) ==3326== by 0x2C8F70: _dl_close_worker (in /lib/ld-2.5.so) ==3326== by 0x2C9476: _dl_close (in /lib/ld-2.5.so) ==3326== by 0x2D4CE3: dlclose_doit (in /lib/libdl-2.5.so) ==3326== by 0x2C3E35: _dl_catch_error (in /lib/ld-2.5.so) ==3326== by 0x2D52CB: _dlerror_run (in /lib/libdl-2.5.so) ==3326== by 0x2D4D19: dlclose (in /lib/libdl-2.5.so) ==3326== by 0x80DA922: load_dynamic_module (loader.c:401) ==3326== by 0x80DB412: load_resource (loader.c:663) ==3326== by 0x80DBD90: load_modules (loader.c:878) ==3326== by 0x807D049: main (asterisk.c:3586) ==3326== ==3326== Source and destination overlap in memcpy(0xBEAFF1FC, 0xBEAFF29C, 428) ==3326== at 0x4006CA6: memcpy (mc_replace_strmem.c:116) ==3326== by 0x598480C: Decode (iLBC_decode.c:254) ==3326== by 0x59852AA: iLBC_decode (iLBC_decode.c:508) ==3326== by 0x5983DFB: ilbctolin_framein (codec_ilbc.c:108) ==3326== by 0x8141E36: framein (translate.c:193) ==3326== by 0x81429FD: calc_cost (translate.c:420) ==3326== by 0x81439C6: __ast_register_translator (translate.c:672) ==3326== by 0x59840D0: load_module (codec_ilbc.c:200) ==3326== by 0x80DB54B: load_resource (loader.c:694) ==3326== by 0x80DBEBB: load_modules (loader.c:898) ==3326== by 0x807D049: main (asterisk.c:3586) ==3326== ==3326== Source and destination overlap in memcpy(0xBEAFF1FC, 0xBEAFF29C, 428) ==3326== at 0x4006CA6: memcpy (mc_replace_strmem.c:116) ==3326== by 0x59849C5: Decode (iLBC_decode.c:302) ==3326== by 0x59852AA: iLBC_decode (iLBC_decode.c:508) ==3326== by 0x5983DFB: ilbctolin_framein (codec_ilbc.c:108) ==3326== by 0x8141E36: framein (translate.c:193) ==3326== by 0x81429FD: calc_cost (translate.c:420) ==3326== by 0x81439C6: __ast_register_translator (translate.c:672) ==3326== by 0x59840D0: load_module (codec_ilbc.c:200) ==3326== by 0x80DB54B: load_resource (loader.c:694) ==3326== by 0x80DBEBB: load_modules (loader.c:898) ==3326== by 0x807D049: main (asterisk.c:3586) ==3326== ==3326== Source and destination overlap in memcpy(0xBEAFFA00, 0xBEAFFAA0, 428) ==3326== at 0x4006CA6: memcpy (mc_replace_strmem.c:116) ==3326== by 0x5986424: iLBC_encode (iLBC_encode.c:311) ==3326== by 0x5983FB7: lintoilbc_frameout (codec_ilbc.c:148) ==3326== by 0x8142A3C: calc_cost (translate.c:422) ==3326== by 0x81439C6: __ast_register_translator (translate.c:672) ==3326== by 0x59840F3: load_module (codec_ilbc.c:202) ==3326== by 0x80DB54B: load_resource (loader.c:694) ==3326== by 0x80DBEBB: load_modules (loader.c:898) ==3326== by 0x807D049: main (asterisk.c:3586) ==3326== ==3326== Conditional jump or move depends on uninitialised value(s) ==3326== at 0x67A492C: speex_decode_int (speex.c:167) ==3326== by 0x678E2B8: speextolin_framein (codec_speex.c:196) ==3326== by 0x8141E36: framein (translate.c:193) ==3326== by 0x81429FD: calc_cost (translate.c:420) ==3326== by 0x81439C6: __ast_register_translator (translate.c:672) ==3326== by 0x678F8C6: load_module (codec_speex.c:458) ==3326== by 0x80DB54B: load_resource (loader.c:694) ==3326== by 0x80DBEBB: load_modules (loader.c:898) ==3326== by 0x807D049: main (asterisk.c:3586) ==3326== ==3326== Conditional jump or move depends on uninitialised value(s) ==3326== at 0x67A4935: speex_decode_int (speex.c:169) ==3326== by 0x678E2B8: speextolin_framein (codec_speex.c:196) ==3326== by 0x8141E36: framein (translate.c:193) ==3326== by 0x81429FD: calc_cost (translate.c:420) ==3326== by 0x81439C6: __ast_register_translator (translate.c:672) ==3326== by 0x678F8C6: load_module (codec_speex.c:458) ==3326== by 0x80DB54B: load_resource (loader.c:694) ==3326== by 0x80DBEBB: load_modules (loader.c:898) ==3326== by 0x807D049: main (asterisk.c:3586) ==3326== ==3326== Thread 26: ==3326== Syscall param socketcall.sendto(msg) points to unaddressable byte(s) ==3326== at 0x461FB8: sendto (in /lib/libc-2.5.so) ==3326== by 0x69708A5: retrans_pkt (chan_sip.c:3445) ==3326== by 0x81354D3: ast_sched_runq (sched.c:631) ==3326== by 0x69C597A: do_monitor (chan_sip.c:21285) ==3326== by 0x8149696: dummy_start (utils.c:968) ==3326== by 0x30845A: start_thread (in /lib/libpthread-2.5.so) ==3326== by 0x460E5D: clone (in /lib/libc-2.5.so) ==3326== Address 0x688DC3C is 12 bytes inside a block of size 745 free'd ==3326== at 0x4004FDA: free (vg_replace_malloc.c:233) ==3326== by 0x69713B5: __sip_reliable_xmit (chan_sip.c:3585) ==3326== by 0x69728B0: send_request (chan_sip.c:3863) ==3326== by 0x6990F6C: transmit_notify_with_mwi (chan_sip.c:10432) ==3326== by 0x69C5301: sip_send_mwi_to_peer (chan_sip.c:21146) ==3326== by 0x69D091E: build_peer (chan_sip.c:22912) ==3326== by 0x69D58EF: reload_config (chan_sip.c:23705) ==3326== by 0x69D935C: load_module (chan_sip.c:24506) ==3326== by 0x80DB54B: load_resource (loader.c:694) ==3326== by 0x80DBEBB: load_modules (loader.c:898) ==3326== by 0x807D049: main (asterisk.c:3586) ==3326== ==3326== Invalid free() / delete / delete[] ==3326== at 0x4004FDA: free (vg_replace_malloc.c:233) ==3326== by 0x6971D4A: __sip_ack (chan_sip.c:3739) ==3326== by 0x69B492F: handle_response (chan_sip.c:17245) ==3326== by 0x69C2F60: handle_incoming (chan_sip.c:20501) ==3326== by 0x69C467C: handle_request_do (chan_sip.c:20879) ==3326== by 0x69C3F78: sipsock_read (chan_sip.c:20773) ==3326== by 0x80D8230: ast_io_wait (io.c:287) ==3326== by 0x69C58DB: do_monitor (chan_sip.c:21281) ==3326== by 0x8149696: dummy_start (utils.c:968) ==3326== by 0x30845A: start_thread (in /lib/libpthread-2.5.so) ==3326== by 0x460E5D: clone (in /lib/libc-2.5.so) ==3326== Address 0x688DC30 is 0 bytes inside a block of size 745 free'd ==3326== at 0x4004FDA: free (vg_replace_malloc.c:233) ==3326== by 0x69713B5: __sip_reliable_xmit (chan_sip.c:3585) ==3326== by 0x69728B0: send_request (chan_sip.c:3863) ==3326== by 0x6990F6C: transmit_notify_with_mwi (chan_sip.c:10432) ==3326== by 0x69C5301: sip_send_mwi_to_peer (chan_sip.c:21146) ==3326== by 0x69D091E: build_peer (chan_sip.c:22912) ==3326== by 0x69D58EF: reload_config (chan_sip.c:23705) ==3326== by 0x69D935C: load_module (chan_sip.c:24506) ==3326== by 0x80DB54B: load_resource (loader.c:694) ==3326== by 0x80DBEBB: load_modules (loader.c:898) ==3326== by 0x807D049: main (asterisk.c:3586) ==3326== ==3326== Thread 29: ==3326== Invalid write of size 1 ==3326== at 0x813B5CF: __ast_str_helper2 (strings.c:128) ==3326== by 0x8148D04: ast_str_append_substr (strings.h:736) ==3326== by 0x5E0F12A: WriteMemoryCallback (func_curl.c:359) ==3326== by 0x5C38C53: Curl_client_write (in /usr/lib/libcurl.so.3.0.0) ==3326== by 0x5C4FA2A: Curl_httpchunk_read (in /usr/lib/libcurl.so.3.0.0) ==3326== by 0x5C4DABB: Curl_readwrite (in /usr/lib/libcurl.so.3.0.0) ==3326== by 0x5C4EBBD: Curl_perform (in /usr/lib/libcurl.so.3.0.0) ==3326== by 0x5C4EFC8: curl_easy_perform (in /usr/lib/libcurl.so.3.0.0) ==3326== by 0x5E0F5D5: acf_curl_exec (func_curl.c:456) ==3326== by 0x80F4A8F: ast_func_read (pbx.c:3316) ==3326== by 0x80F4FD0: pbx_substitute_variables_helper_full (pbx.c:3451) ==3326== by 0x80F5574: pbx_substitute_variables_helper (pbx.c:3546) ==3326== Address 0x4DF723C is 0 bytes after a block of size 28 free'd ==3326== at 0x40054BB: realloc (vg_replace_malloc.c:306) ==3326== by 0x81485EB: _ast_realloc (utils.h:493) ==3326== by 0x8148B7A: ast_str_make_space (strings.h:518) ==3326== by 0x813B628: __ast_str_helper2 (strings.c:135) ==3326== by 0x8148D04: ast_str_append_substr (strings.h:736) ==3326== by 0x5E0F12A: WriteMemoryCallback (func_curl.c:359) ==3326== by 0x5C38C53: Curl_client_write (in /usr/lib/libcurl.so.3.0.0) ==3326== by 0x5C4FA2A: Curl_httpchunk_read (in /usr/lib/libcurl.so.3.0.0) ==3326== by 0x5C4DABB: Curl_readwrite (in /usr/lib/libcurl.so.3.0.0) ==3326== by 0x5C4EBBD: Curl_perform (in /usr/lib/libcurl.so.3.0.0) ==3326== by 0x5C4EFC8: curl_easy_perform (in /usr/lib/libcurl.so.3.0.0) ==3326== by 0x5E0F5D5: acf_curl_exec (func_curl.c:456) ==3326== ==3326== Thread 30: ==3326== Invalid read of size 4 ==3326== at 0x808BD32: ast_check_hangup (channel.c:462) ==3326== by 0x808156B: autoservice_run (autoservice.c:95) ==3326== by 0x8149696: dummy_start (utils.c:968) ==3326== by 0x30845A: start_thread (in /lib/libpthread-2.5.so) ==3326== by 0x460E5D: clone (in /lib/libc-2.5.so) ==3326== Address 0x3D74672B is not stack'd, malloc'd or (recently) free'd ==3326== ==3326== Process terminating with default action of signal 11 (SIGSEGV): dumping core ==3326== Access not within mapped region at address 0x3D74672B ==3326== at 0x808BD32: ast_check_hangup (channel.c:462) ==3326== by 0x808156B: autoservice_run (autoservice.c:95) ==3326== by 0x8149696: dummy_start (utils.c:968) ==3326== by 0x30845A: start_thread (in /lib/libpthread-2.5.so) ==3326== by 0x460E5D: clone (in /lib/libc-2.5.so) ==3326== ==3326== ERROR SUMMARY: 25714 errors from 17 contexts (suppressed: 878 from 1) ==3326== malloc/free: in use at exit: 3,494,583 bytes in 36,560 blocks. ==3326== malloc/free: 174,908 allocs, 138,349 frees, 12,760,707 bytes allocated. ==3326== For counts of detected errors, rerun with: -v ==3326== searching for pointers to 36,560 not-freed blocks. ==3326== checked 15,295,892 bytes. ==3326== ==3326== LEAK SUMMARY: ==3326== definitely lost: 42,618 bytes in 546 blocks. ==3326== possibly lost: 565,340 bytes in 55 blocks. ==3326== still reachable: 2,886,625 bytes in 35,959 blocks. ==3326== suppressed: 0 bytes in 0 blocks. ==3326== Use --leak-check=full to see details of leaked memory.