==2590== Memcheck, a memory error detector.
==2590== Copyright (C) 2002-2006, and GNU GPL'd, by Julian Seward et al.
==2590== Using LibVEX rev 1658, a library for dynamic binary translation.
==2590== Copyright (C) 2004-2006, and GNU GPL'd, by OpenWorks LLP.
==2590== Using valgrind-3.2.1, a dynamic binary instrumentation framework.
==2590== Copyright (C) 2000-2006, and GNU GPL'd, by Julian Seward et al.
==2590== For more details, rerun with: -v
==2590== 
==2590== My PID = 2590, parent PID = 2414.  Prog and args are:
==2590==    asterisk
==2590==    -vvvvcg
==2590== 
==2590== Invalid read of size 1
==2590==    at 0x4003DD: _dl_close (in /lib/ld-2.5.so)
==2590==    by 0x555CE3: dlclose_doit (in /lib/libdl-2.5.so)
==2590==    by 0x3FAE25: _dl_catch_error (in /lib/ld-2.5.so)
==2590==    by 0x5562CB: _dlerror_run (in /lib/libdl-2.5.so)
==2590==    by 0x555D19: dlclose (in /lib/libdl-2.5.so)
==2590==    by 0x80E2F32: load_dynamic_module (loader.c:402)
==2590==    by 0x80E3A22: load_resource (loader.c:664)
==2590==    by 0x80E43A0: load_modules (loader.c:879)
==2590==    by 0x807E285: main (asterisk.c:3548)
==2590==  Address 0x4E2E67C is 516 bytes inside a block of size 654 free'd
==2590==    at 0x4004FDA: free (vg_replace_malloc.c:233)
==2590==    by 0x3FFF8C: _dl_close_worker (in /lib/ld-2.5.so)
==2590==    by 0x400406: _dl_close (in /lib/ld-2.5.so)
==2590==    by 0x555CE3: dlclose_doit (in /lib/libdl-2.5.so)
==2590==    by 0x3FAE25: _dl_catch_error (in /lib/ld-2.5.so)
==2590==    by 0x5562CB: _dlerror_run (in /lib/libdl-2.5.so)
==2590==    by 0x555D19: dlclose (in /lib/libdl-2.5.so)
==2590==    by 0x80E2F32: load_dynamic_module (loader.c:402)
==2590==    by 0x80E3A22: load_resource (loader.c:664)
==2590==    by 0x80E43A0: load_modules (loader.c:879)
==2590==    by 0x807E285: main (asterisk.c:3548)
==2590== 
==2590== Invalid read of size 4
==2590==    at 0x4003E6: _dl_close (in /lib/ld-2.5.so)
==2590==    by 0x555CE3: dlclose_doit (in /lib/libdl-2.5.so)
==2590==    by 0x3FAE25: _dl_catch_error (in /lib/ld-2.5.so)
==2590==    by 0x5562CB: _dlerror_run (in /lib/libdl-2.5.so)
==2590==    by 0x555D19: dlclose (in /lib/libdl-2.5.so)
==2590==    by 0x80E2F32: load_dynamic_module (loader.c:402)
==2590==    by 0x80E3A22: load_resource (loader.c:664)
==2590==    by 0x80E43A0: load_modules (loader.c:879)
==2590==    by 0x807E285: main (asterisk.c:3548)
==2590==  Address 0x4E2E600 is 392 bytes inside a block of size 654 free'd
==2590==    at 0x4004FDA: free (vg_replace_malloc.c:233)
==2590==    by 0x3FFF8C: _dl_close_worker (in /lib/ld-2.5.so)
==2590==    by 0x400406: _dl_close (in /lib/ld-2.5.so)
==2590==    by 0x555CE3: dlclose_doit (in /lib/libdl-2.5.so)
==2590==    by 0x3FAE25: _dl_catch_error (in /lib/ld-2.5.so)
==2590==    by 0x5562CB: _dlerror_run (in /lib/libdl-2.5.so)
==2590==    by 0x555D19: dlclose (in /lib/libdl-2.5.so)
==2590==    by 0x80E2F32: load_dynamic_module (loader.c:402)
==2590==    by 0x80E3A22: load_resource (loader.c:664)
==2590==    by 0x80E43A0: load_modules (loader.c:879)
==2590==    by 0x807E285: main (asterisk.c:3548)
==2590== 
==2590== Invalid read of size 4
==2590==    at 0x40041D: _dl_close (in /lib/ld-2.5.so)
==2590==    by 0x555CE3: dlclose_doit (in /lib/libdl-2.5.so)
==2590==    by 0x3FAE25: _dl_catch_error (in /lib/ld-2.5.so)
==2590==    by 0x5562CB: _dlerror_run (in /lib/libdl-2.5.so)
==2590==    by 0x555D19: dlclose (in /lib/libdl-2.5.so)
==2590==    by 0x80E2F32: load_dynamic_module (loader.c:402)
==2590==    by 0x80E3A22: load_resource (loader.c:664)
==2590==    by 0x80E43A0: load_modules (loader.c:879)
==2590==    by 0x807E285: main (asterisk.c:3548)
==2590==  Address 0x4E2E47C is 4 bytes inside a block of size 654 free'd
==2590==    at 0x4004FDA: free (vg_replace_malloc.c:233)
==2590==    by 0x3FFF8C: _dl_close_worker (in /lib/ld-2.5.so)
==2590==    by 0x400406: _dl_close (in /lib/ld-2.5.so)
==2590==    by 0x555CE3: dlclose_doit (in /lib/libdl-2.5.so)
==2590==    by 0x3FAE25: _dl_catch_error (in /lib/ld-2.5.so)
==2590==    by 0x5562CB: _dlerror_run (in /lib/libdl-2.5.so)
==2590==    by 0x555D19: dlclose (in /lib/libdl-2.5.so)
==2590==    by 0x80E2F32: load_dynamic_module (loader.c:402)
==2590==    by 0x80E3A22: load_resource (loader.c:664)
==2590==    by 0x80E43A0: load_modules (loader.c:879)
==2590==    by 0x807E285: main (asterisk.c:3548)
==2590== 
==2590== Invalid read of size 1
==2590==    at 0x4006258: strlen (mc_replace_strmem.c:247)
==2590==    by 0x3FAF21: _dl_signal_error (in /lib/ld-2.5.so)
==2590==    by 0x400432: _dl_close (in /lib/ld-2.5.so)
==2590==    by 0x555CE3: dlclose_doit (in /lib/libdl-2.5.so)
==2590==    by 0x3FAE25: _dl_catch_error (in /lib/ld-2.5.so)
==2590==    by 0x5562CB: _dlerror_run (in /lib/libdl-2.5.so)
==2590==    by 0x555D19: dlclose (in /lib/libdl-2.5.so)
==2590==    by 0x80E2F32: load_dynamic_module (loader.c:402)
==2590==    by 0x80E3A22: load_resource (loader.c:664)
==2590==    by 0x80E43A0: load_modules (loader.c:879)
==2590==    by 0x807E285: main (asterisk.c:3548)
==2590==  Address 0x4E2E418 is 0 bytes inside a block of size 46 free'd
==2590==    at 0x4004FDA: free (vg_replace_malloc.c:233)
==2590==    by 0x3FFF05: _dl_close_worker (in /lib/ld-2.5.so)
==2590==    by 0x400406: _dl_close (in /lib/ld-2.5.so)
==2590==    by 0x555CE3: dlclose_doit (in /lib/libdl-2.5.so)
==2590==    by 0x3FAE25: _dl_catch_error (in /lib/ld-2.5.so)
==2590==    by 0x5562CB: _dlerror_run (in /lib/libdl-2.5.so)
==2590==    by 0x555D19: dlclose (in /lib/libdl-2.5.so)
==2590==    by 0x80E2F32: load_dynamic_module (loader.c:402)
==2590==    by 0x80E3A22: load_resource (loader.c:664)
==2590==    by 0x80E43A0: load_modules (loader.c:879)
==2590==    by 0x807E285: main (asterisk.c:3548)
==2590== 
==2590== Invalid read of size 1
==2590==    at 0x4006263: strlen (mc_replace_strmem.c:247)
==2590==    by 0x3FAF21: _dl_signal_error (in /lib/ld-2.5.so)
==2590==    by 0x400432: _dl_close (in /lib/ld-2.5.so)
==2590==    by 0x555CE3: dlclose_doit (in /lib/libdl-2.5.so)
==2590==    by 0x3FAE25: _dl_catch_error (in /lib/ld-2.5.so)
==2590==    by 0x5562CB: _dlerror_run (in /lib/libdl-2.5.so)
==2590==    by 0x555D19: dlclose (in /lib/libdl-2.5.so)
==2590==    by 0x80E2F32: load_dynamic_module (loader.c:402)
==2590==    by 0x80E3A22: load_resource (loader.c:664)
==2590==    by 0x80E43A0: load_modules (loader.c:879)
==2590==    by 0x807E285: main (asterisk.c:3548)
==2590==  Address 0x4E2E419 is 1 bytes inside a block of size 46 free'd
==2590==    at 0x4004FDA: free (vg_replace_malloc.c:233)
==2590==    by 0x3FFF05: _dl_close_worker (in /lib/ld-2.5.so)
==2590==    by 0x400406: _dl_close (in /lib/ld-2.5.so)
==2590==    by 0x555CE3: dlclose_doit (in /lib/libdl-2.5.so)
==2590==    by 0x3FAE25: _dl_catch_error (in /lib/ld-2.5.so)
==2590==    by 0x5562CB: _dlerror_run (in /lib/libdl-2.5.so)
==2590==    by 0x555D19: dlclose (in /lib/libdl-2.5.so)
==2590==    by 0x80E2F32: load_dynamic_module (loader.c:402)
==2590==    by 0x80E3A22: load_resource (loader.c:664)
==2590==    by 0x80E43A0: load_modules (loader.c:879)
==2590==    by 0x807E285: main (asterisk.c:3548)
==2590== 
==2590== Invalid read of size 2
==2590==    at 0x402CFA: memcpy (in /lib/ld-2.5.so)
==2590==    by 0x400432: _dl_close (in /lib/ld-2.5.so)
==2590==    by 0x555CE3: dlclose_doit (in /lib/libdl-2.5.so)
==2590==    by 0x3FAE25: _dl_catch_error (in /lib/ld-2.5.so)
==2590==    by 0x5562CB: _dlerror_run (in /lib/libdl-2.5.so)
==2590==    by 0x555D19: dlclose (in /lib/libdl-2.5.so)
==2590==    by 0x80E2F32: load_dynamic_module (loader.c:402)
==2590==    by 0x80E3A22: load_resource (loader.c:664)
==2590==    by 0x80E43A0: load_modules (loader.c:879)
==2590==    by 0x807E285: main (asterisk.c:3548)
==2590==  Address 0x4E2E418 is 0 bytes inside a block of size 46 free'd
==2590==    at 0x4004FDA: free (vg_replace_malloc.c:233)
==2590==    by 0x3FFF05: _dl_close_worker (in /lib/ld-2.5.so)
==2590==    by 0x400406: _dl_close (in /lib/ld-2.5.so)
==2590==    by 0x555CE3: dlclose_doit (in /lib/libdl-2.5.so)
==2590==    by 0x3FAE25: _dl_catch_error (in /lib/ld-2.5.so)
==2590==    by 0x5562CB: _dlerror_run (in /lib/libdl-2.5.so)
==2590==    by 0x555D19: dlclose (in /lib/libdl-2.5.so)
==2590==    by 0x80E2F32: load_dynamic_module (loader.c:402)
==2590==    by 0x80E3A22: load_resource (loader.c:664)
==2590==    by 0x80E43A0: load_modules (loader.c:879)
==2590==    by 0x807E285: main (asterisk.c:3548)
==2590== 
==2590== Invalid read of size 4
==2590==    at 0x402CFC: memcpy (in /lib/ld-2.5.so)
==2590==    by 0x400432: _dl_close (in /lib/ld-2.5.so)
==2590==    by 0x555CE3: dlclose_doit (in /lib/libdl-2.5.so)
==2590==    by 0x3FAE25: _dl_catch_error (in /lib/ld-2.5.so)
==2590==    by 0x5562CB: _dlerror_run (in /lib/libdl-2.5.so)
==2590==    by 0x555D19: dlclose (in /lib/libdl-2.5.so)
==2590==    by 0x80E2F32: load_dynamic_module (loader.c:402)
==2590==    by 0x80E3A22: load_resource (loader.c:664)
==2590==    by 0x80E43A0: load_modules (loader.c:879)
==2590==    by 0x807E285: main (asterisk.c:3548)
==2590==  Address 0x4E2E41A is 2 bytes inside a block of size 46 free'd
==2590==    at 0x4004FDA: free (vg_replace_malloc.c:233)
==2590==    by 0x3FFF05: _dl_close_worker (in /lib/ld-2.5.so)
==2590==    by 0x400406: _dl_close (in /lib/ld-2.5.so)
==2590==    by 0x555CE3: dlclose_doit (in /lib/libdl-2.5.so)
==2590==    by 0x3FAE25: _dl_catch_error (in /lib/ld-2.5.so)
==2590==    by 0x5562CB: _dlerror_run (in /lib/libdl-2.5.so)
==2590==    by 0x555D19: dlclose (in /lib/libdl-2.5.so)
==2590==    by 0x80E2F32: load_dynamic_module (loader.c:402)
==2590==    by 0x80E3A22: load_resource (loader.c:664)
==2590==    by 0x80E43A0: load_modules (loader.c:879)
==2590==    by 0x807E285: main (asterisk.c:3548)
==2590== 
==2590== Invalid read of size 1
==2590==    at 0x402CF5: memcpy (in /lib/ld-2.5.so)
==2590==    by 0x400432: _dl_close (in /lib/ld-2.5.so)
==2590==    by 0x555CE3: dlclose_doit (in /lib/libdl-2.5.so)
==2590==    by 0x3FAE25: _dl_catch_error (in /lib/ld-2.5.so)
==2590==    by 0x5562CB: _dlerror_run (in /lib/libdl-2.5.so)
==2590==    by 0x555D19: dlclose (in /lib/libdl-2.5.so)
==2590==    by 0x80E2F32: load_dynamic_module (loader.c:402)
==2590==    by 0x80E3A22: load_resource (loader.c:664)
==2590==    by 0x80E43A0: load_modules (loader.c:879)
==2590==    by 0x807E478: main (asterisk.c:3613)
==2590==  Address 0x531B6A0 is 0 bytes inside a block of size 45 free'd
==2590==    at 0x4004FDA: free (vg_replace_malloc.c:233)
==2590==    by 0x3FFF05: _dl_close_worker (in /lib/ld-2.5.so)
==2590==    by 0x400406: _dl_close (in /lib/ld-2.5.so)
==2590==    by 0x555CE3: dlclose_doit (in /lib/libdl-2.5.so)
==2590==    by 0x3FAE25: _dl_catch_error (in /lib/ld-2.5.so)
==2590==    by 0x5562CB: _dlerror_run (in /lib/libdl-2.5.so)
==2590==    by 0x555D19: dlclose (in /lib/libdl-2.5.so)
==2590==    by 0x80E2F32: load_dynamic_module (loader.c:402)
==2590==    by 0x80E3A22: load_resource (loader.c:664)
==2590==    by 0x80E43A0: load_modules (loader.c:879)
==2590==    by 0x807E478: main (asterisk.c:3613)
==2590== 
==2590== Conditional jump or move depends on uninitialised value(s)
==2590==    at 0x5E1DF8D: sqlchar_as_sqlwchar (in /usr/lib/libmyodbc5-5.1.5.so)
==2590==    by 0x5E0871C: SQLConnect (in /usr/lib/libmyodbc5-5.1.5.so)
==2590==    by 0x5B646DB: SQLConnect (SQLConnect.c:3884)
==2590==    by 0x5B477DB: odbc_obj_connect (res_odbc.c:1439)
==2590==    by 0x5B46E63: ast_odbc_request_obj2 (res_odbc.c:1267)
==2590==    by 0x5B47295: ast_odbc_request_obj (res_odbc.c:1333)
==2590==    by 0x5B45AFB: odbc_register_class (res_odbc.c:964)
==2590==    by 0x5B454B8: load_odbc_config (res_odbc.c:859)
==2590==    by 0x5B4860E: load_module (res_odbc.c:1680)
==2590==    by 0x80E3B5B: load_resource (loader.c:695)
==2590==    by 0x80E43A0: load_modules (loader.c:879)
==2590==    by 0x807E478: main (asterisk.c:3613)
==2590== 
==2590== Conditional jump or move depends on uninitialised value(s)
==2590==    at 0x5E1DF8D: sqlchar_as_sqlwchar (in /usr/lib/libmyodbc5-5.1.5.so)
==2590==    by 0x5E08731: SQLConnect (in /usr/lib/libmyodbc5-5.1.5.so)
==2590==    by 0x5B646DB: SQLConnect (SQLConnect.c:3884)
==2590==    by 0x5B477DB: odbc_obj_connect (res_odbc.c:1439)
==2590==    by 0x5B46E63: ast_odbc_request_obj2 (res_odbc.c:1267)
==2590==    by 0x5B47295: ast_odbc_request_obj (res_odbc.c:1333)
==2590==    by 0x5B45AFB: odbc_register_class (res_odbc.c:964)
==2590==    by 0x5B454B8: load_odbc_config (res_odbc.c:859)
==2590==    by 0x5B4860E: load_module (res_odbc.c:1680)
==2590==    by 0x80E3B5B: load_resource (loader.c:695)
==2590==    by 0x80E43A0: load_modules (loader.c:879)
==2590==    by 0x807E478: main (asterisk.c:3613)
==2590== 
==2590== Conditional jump or move depends on uninitialised value(s)
==2590==    at 0x5E1DF8D: sqlchar_as_sqlwchar (in /usr/lib/libmyodbc5-5.1.5.so)
==2590==    by 0x5E08748: SQLConnect (in /usr/lib/libmyodbc5-5.1.5.so)
==2590==    by 0x5B646DB: SQLConnect (SQLConnect.c:3884)
==2590==    by 0x5B477DB: odbc_obj_connect (res_odbc.c:1439)
==2590==    by 0x5B46E63: ast_odbc_request_obj2 (res_odbc.c:1267)
==2590==    by 0x5B47295: ast_odbc_request_obj (res_odbc.c:1333)
==2590==    by 0x5B45AFB: odbc_register_class (res_odbc.c:964)
==2590==    by 0x5B454B8: load_odbc_config (res_odbc.c:859)
==2590==    by 0x5B4860E: load_module (res_odbc.c:1680)
==2590==    by 0x80E3B5B: load_resource (loader.c:695)
==2590==    by 0x80E43A0: load_modules (loader.c:879)
==2590==    by 0x807E478: main (asterisk.c:3613)
==2590== 
==2590== Conditional jump or move depends on uninitialised value(s)
==2590==    at 0x91C292C: speex_decode_int (speex.c:167)
==2590==    by 0x94DD2B8: speextolin_framein (codec_speex.c:196)
==2590==    by 0x814ACD2: framein (translate.c:194)
==2590==    by 0x814B899: calc_cost (translate.c:421)
==2590==    by 0x814C99B: __ast_register_translator (translate.c:681)
==2590==    by 0x94DE8C6: load_module (codec_speex.c:458)
==2590==    by 0x80E3B5B: load_resource (loader.c:695)
==2590==    by 0x80E44CB: load_modules (loader.c:899)
==2590==    by 0x807E478: main (asterisk.c:3613)
==2590== 
==2590== Conditional jump or move depends on uninitialised value(s)
==2590==    at 0x91C2935: speex_decode_int (speex.c:169)
==2590==    by 0x94DD2B8: speextolin_framein (codec_speex.c:196)
==2590==    by 0x814ACD2: framein (translate.c:194)
==2590==    by 0x814B899: calc_cost (translate.c:421)
==2590==    by 0x814C99B: __ast_register_translator (translate.c:681)
==2590==    by 0x94DE8C6: load_module (codec_speex.c:458)
==2590==    by 0x80E3B5B: load_resource (loader.c:695)
==2590==    by 0x80E44CB: load_modules (loader.c:899)
==2590==    by 0x807E478: main (asterisk.c:3613)
==2590== Warning: noted but unhandled ioctl 0xDA34 with no size/direction hints
==2590==    This could cause spurious value errors to appear.
==2590==    See README_MISSING_SYSCALL_OR_IOCTL for guidance on writing a proper wrapper.
==2590== Warning: noted but unhandled ioctl 0xDA34 with no size/direction hints
==2590==    This could cause spurious value errors to appear.
==2590==    See README_MISSING_SYSCALL_OR_IOCTL for guidance on writing a proper wrapper.
==2590== Warning: noted but unhandled ioctl 0xDA35 with no size/direction hints
==2590==    This could cause spurious value errors to appear.
==2590==    See README_MISSING_SYSCALL_OR_IOCTL for guidance on writing a proper wrapper.
==2590== 
==2590== Thread 43:
==2590== Invalid write of size 1
==2590==    at 0x8144375: __ast_str_helper2 (strings.c:141)
==2590==    by 0x8151CAC: ast_str_append_escapecommas (strings.h:777)
==2590==    by 0x90B23ED: acf_odbc_read (func_odbc.c:547)
==2590==    by 0x80FD0AB: ast_func_read (pbx.c:3346)
==2590==    by 0x80FD5EC: pbx_substitute_variables_helper_full (pbx.c:3481)
==2590==    by 0x80FDB90: pbx_substitute_variables_helper (pbx.c:3576)
==2590==    by 0x80FDC70: pbx_substitute_variables (pbx.c:3599)
==2590==    by 0x80FDE98: pbx_extension_helper (pbx.c:3661)
==2590==    by 0x80FF43F: ast_spawn_extension (pbx.c:4137)
==2590==    by 0x80FFACB: __ast_pbx_run (pbx.c:4227)
==2590==    by 0x8100F53: pbx_thread (pbx.c:4514)
==2590==    by 0x81525CE: dummy_start (utils.c:968)
==2590==  Address 0x6A3E59C is 0 bytes after a block of size 28 alloc'd
==2590==    at 0x40046FF: calloc (vg_replace_malloc.c:279)
==2590==    by 0x81514BC: _ast_calloc (utils.h:457)
==2590==    by 0x8151722: ast_threadstorage_get (threadstorage.h:167)
==2590==    by 0x8151B2D: ast_str_thread_get (strings.h:607)
==2590==    by 0x90B19D4: acf_odbc_read (func_odbc.c:380)
==2590==    by 0x80FD0AB: ast_func_read (pbx.c:3346)
==2590==    by 0x80FD5EC: pbx_substitute_variables_helper_full (pbx.c:3481)
==2590==    by 0x80FDB90: pbx_substitute_variables_helper (pbx.c:3576)
==2590==    by 0x80FDC70: pbx_substitute_variables (pbx.c:3599)
==2590==    by 0x80FDE98: pbx_extension_helper (pbx.c:3661)
==2590==    by 0x80FF43F: ast_spawn_extension (pbx.c:4137)
==2590==    by 0x80FFACB: __ast_pbx_run (pbx.c:4227)
==2590== 
==2590== Invalid write of size 1
==2590==    at 0x8144439: __ast_str_helper2 (strings.c:162)
==2590==    by 0x8151CAC: ast_str_append_escapecommas (strings.h:777)
==2590==    by 0x90B23ED: acf_odbc_read (func_odbc.c:547)
==2590==    by 0x80FD0AB: ast_func_read (pbx.c:3346)
==2590==    by 0x80FD5EC: pbx_substitute_variables_helper_full (pbx.c:3481)
==2590==    by 0x80FDB90: pbx_substitute_variables_helper (pbx.c:3576)
==2590==    by 0x80FDC70: pbx_substitute_variables (pbx.c:3599)
==2590==    by 0x80FDE98: pbx_extension_helper (pbx.c:3661)
==2590==    by 0x80FF43F: ast_spawn_extension (pbx.c:4137)
==2590==    by 0x80FFACB: __ast_pbx_run (pbx.c:4227)
==2590==    by 0x8100F53: pbx_thread (pbx.c:4514)
==2590==    by 0x81525CE: dummy_start (utils.c:968)
==2590==  Address 0x6A3E59D is 1 bytes after a block of size 28 alloc'd
==2590==    at 0x40046FF: calloc (vg_replace_malloc.c:279)
==2590==    by 0x81514BC: _ast_calloc (utils.h:457)
==2590==    by 0x8151722: ast_threadstorage_get (threadstorage.h:167)
==2590==    by 0x8151B2D: ast_str_thread_get (strings.h:607)
==2590==    by 0x90B19D4: acf_odbc_read (func_odbc.c:380)
==2590==    by 0x80FD0AB: ast_func_read (pbx.c:3346)
==2590==    by 0x80FD5EC: pbx_substitute_variables_helper_full (pbx.c:3481)
==2590==    by 0x80FDB90: pbx_substitute_variables_helper (pbx.c:3576)
==2590==    by 0x80FDC70: pbx_substitute_variables (pbx.c:3599)
==2590==    by 0x80FDE98: pbx_extension_helper (pbx.c:3661)
==2590==    by 0x80FF43F: ast_spawn_extension (pbx.c:4137)
==2590==    by 0x80FFACB: __ast_pbx_run (pbx.c:4227)
==2590== 
==2590== Invalid write of size 1
==2590==    at 0x46FFA1: vsnprintf (in /lib/libc-2.5.so)
==2590==    by 0x8144100: __ast_str_helper (strings.c:72)
==2590==    by 0x8151BCC: ast_str_append_va (strings.h:749)
==2590==    by 0x8151D0E: ast_str_append (strings.h:821)
==2590==    by 0x90B23C8: acf_odbc_read (func_odbc.c:545)
==2590==    by 0x80FD0AB: ast_func_read (pbx.c:3346)
==2590==    by 0x80FD5EC: pbx_substitute_variables_helper_full (pbx.c:3481)
==2590==    by 0x80FDB90: pbx_substitute_variables_helper (pbx.c:3576)
==2590==    by 0x80FDC70: pbx_substitute_variables (pbx.c:3599)
==2590==    by 0x80FDE98: pbx_extension_helper (pbx.c:3661)
==2590==    by 0x80FF43F: ast_spawn_extension (pbx.c:4137)
==2590==    by 0x80FFACB: __ast_pbx_run (pbx.c:4227)
==2590==  Address 0x6A3E59D is 1 bytes after a block of size 28 alloc'd
==2590==    at 0x40046FF: calloc (vg_replace_malloc.c:279)
==2590==    by 0x81514BC: _ast_calloc (utils.h:457)
==2590==    by 0x8151722: ast_threadstorage_get (threadstorage.h:167)
==2590==    by 0x8151B2D: ast_str_thread_get (strings.h:607)
==2590==    by 0x90B19D4: acf_odbc_read (func_odbc.c:380)
==2590==    by 0x80FD0AB: ast_func_read (pbx.c:3346)
==2590==    by 0x80FD5EC: pbx_substitute_variables_helper_full (pbx.c:3481)
==2590==    by 0x80FDB90: pbx_substitute_variables_helper (pbx.c:3576)
==2590==    by 0x80FDC70: pbx_substitute_variables (pbx.c:3599)
==2590==    by 0x80FDE98: pbx_extension_helper (pbx.c:3661)
==2590==    by 0x80FF43F: ast_spawn_extension (pbx.c:4137)
==2590==    by 0x80FFACB: __ast_pbx_run (pbx.c:4227)
==2590== 
==2590== Invalid write of size 1
==2590==    at 0x4751D9: _IO_default_xsputn (in /lib/libc-2.5.so)
==2590==    by 0x44B95E: vfprintf (in /lib/libc-2.5.so)
==2590==    by 0x46FFD3: vsnprintf (in /lib/libc-2.5.so)
==2590==    by 0x8144100: __ast_str_helper (strings.c:72)
==2590==    by 0x8151BCC: ast_str_append_va (strings.h:749)
==2590==    by 0x8151D0E: ast_str_append (strings.h:821)
==2590==    by 0x90B23C8: acf_odbc_read (func_odbc.c:545)
==2590==    by 0x80FD0AB: ast_func_read (pbx.c:3346)
==2590==    by 0x80FD5EC: pbx_substitute_variables_helper_full (pbx.c:3481)
==2590==    by 0x80FDB90: pbx_substitute_variables_helper (pbx.c:3576)
==2590==    by 0x80FDC70: pbx_substitute_variables (pbx.c:3599)
==2590==    by 0x80FDE98: pbx_extension_helper (pbx.c:3661)
==2590==  Address 0x6A3E59D is 1 bytes after a block of size 28 alloc'd
==2590==    at 0x40046FF: calloc (vg_replace_malloc.c:279)
==2590==    by 0x81514BC: _ast_calloc (utils.h:457)
==2590==    by 0x8151722: ast_threadstorage_get (threadstorage.h:167)
==2590==    by 0x8151B2D: ast_str_thread_get (strings.h:607)
==2590==    by 0x90B19D4: acf_odbc_read (func_odbc.c:380)
==2590==    by 0x80FD0AB: ast_func_read (pbx.c:3346)
==2590==    by 0x80FD5EC: pbx_substitute_variables_helper_full (pbx.c:3481)
==2590==    by 0x80FDB90: pbx_substitute_variables_helper (pbx.c:3576)
==2590==    by 0x80FDC70: pbx_substitute_variables (pbx.c:3599)
==2590==    by 0x80FDE98: pbx_extension_helper (pbx.c:3661)
==2590==    by 0x80FF43F: ast_spawn_extension (pbx.c:4137)
==2590==    by 0x80FFACB: __ast_pbx_run (pbx.c:4227)
==2590== 
==2590== Invalid write of size 1
==2590==    at 0x46FFEA: vsnprintf (in /lib/libc-2.5.so)
==2590==    by 0x8144100: __ast_str_helper (strings.c:72)
==2590==    by 0x8151BCC: ast_str_append_va (strings.h:749)
==2590==    by 0x8151D0E: ast_str_append (strings.h:821)
==2590==    by 0x90B23C8: acf_odbc_read (func_odbc.c:545)
==2590==    by 0x80FD0AB: ast_func_read (pbx.c:3346)
==2590==    by 0x80FD5EC: pbx_substitute_variables_helper_full (pbx.c:3481)
==2590==    by 0x80FDB90: pbx_substitute_variables_helper (pbx.c:3576)
==2590==    by 0x80FDC70: pbx_substitute_variables (pbx.c:3599)
==2590==    by 0x80FDE98: pbx_extension_helper (pbx.c:3661)
==2590==    by 0x80FF43F: ast_spawn_extension (pbx.c:4137)
==2590==    by 0x80FFACB: __ast_pbx_run (pbx.c:4227)
==2590==  Address 0x6A3E59E is 2 bytes after a block of size 28 alloc'd
==2590==    at 0x40046FF: calloc (vg_replace_malloc.c:279)
==2590==    by 0x81514BC: _ast_calloc (utils.h:457)
==2590==    by 0x8151722: ast_threadstorage_get (threadstorage.h:167)
==2590==    by 0x8151B2D: ast_str_thread_get (strings.h:607)
==2590==    by 0x90B19D4: acf_odbc_read (func_odbc.c:380)
==2590==    by 0x80FD0AB: ast_func_read (pbx.c:3346)
==2590==    by 0x80FD5EC: pbx_substitute_variables_helper_full (pbx.c:3481)
==2590==    by 0x80FDB90: pbx_substitute_variables_helper (pbx.c:3576)
==2590==    by 0x80FDC70: pbx_substitute_variables (pbx.c:3599)
==2590==    by 0x80FDE98: pbx_extension_helper (pbx.c:3661)
==2590==    by 0x80FF43F: ast_spawn_extension (pbx.c:4137)
==2590==    by 0x80FFACB: __ast_pbx_run (pbx.c:4227)
==2590== 
==2590== Conditional jump or move depends on uninitialised value(s)
==2590==    at 0x80A0A16: ast_var_assign (chanvars.c:42)
==2590==    by 0x810E557: pbx_builtin_setvar_helper (pbx.c:8962)
==2590==    by 0x90B2AC1: acf_odbc_read (func_odbc.c:641)
==2590==    by 0x80FD0AB: ast_func_read (pbx.c:3346)
==2590==    by 0x80FD5EC: pbx_substitute_variables_helper_full (pbx.c:3481)
==2590==    by 0x80FDB90: pbx_substitute_variables_helper (pbx.c:3576)
==2590==    by 0x80FDC70: pbx_substitute_variables (pbx.c:3599)
==2590==    by 0x80FDE98: pbx_extension_helper (pbx.c:3661)
==2590==    by 0x80FF43F: ast_spawn_extension (pbx.c:4137)
==2590==    by 0x80FFACB: __ast_pbx_run (pbx.c:4227)
==2590==    by 0x8100F53: pbx_thread (pbx.c:4514)
==2590==    by 0x81525CE: dummy_start (utils.c:968)
==2590== 
==2590== Conditional jump or move depends on uninitialised value(s)
==2590==    at 0x815187A: ast_copy_string (strings.h:207)
==2590==    by 0x80A0AB3: ast_var_assign (chanvars.c:54)
==2590==    by 0x810E557: pbx_builtin_setvar_helper (pbx.c:8962)
==2590==    by 0x90B2AC1: acf_odbc_read (func_odbc.c:641)
==2590==    by 0x80FD0AB: ast_func_read (pbx.c:3346)
==2590==    by 0x80FD5EC: pbx_substitute_variables_helper_full (pbx.c:3481)
==2590==    by 0x80FDB90: pbx_substitute_variables_helper (pbx.c:3576)
==2590==    by 0x80FDC70: pbx_substitute_variables (pbx.c:3599)
==2590==    by 0x80FDE98: pbx_extension_helper (pbx.c:3661)
==2590==    by 0x80FF43F: ast_spawn_extension (pbx.c:4137)
==2590==    by 0x80FFACB: __ast_pbx_run (pbx.c:4227)
==2590==    by 0x8100F53: pbx_thread (pbx.c:4514)
==2590== 
==2590== Conditional jump or move depends on uninitialised value(s)
==2590==    at 0x71B9FCF: array (func_strings.c:564)
==2590==    by 0x71BA4D3: hash_write (func_strings.c:641)
==2590==    by 0x80FD245: ast_func_write (pbx.c:3369)
==2590==    by 0x810E392: pbx_builtin_setvar_helper (pbx.c:8931)
==2590==    by 0x810E7BE: pbx_builtin_setvar (pbx.c:8998)
==2590==    by 0x80F6670: pbx_exec (pbx.c:1342)
==2590==    by 0x80FE122: pbx_extension_helper (pbx.c:3684)
==2590==    by 0x80FF43F: ast_spawn_extension (pbx.c:4137)
==2590==    by 0x80FFACB: __ast_pbx_run (pbx.c:4227)
==2590==    by 0x8100F53: pbx_thread (pbx.c:4514)
==2590==    by 0x81525CE: dummy_start (utils.c:968)
==2590==    by 0x58946A: start_thread (in /lib/libpthread-2.5.so)
==2590== 
==2590== Conditional jump or move depends on uninitialised value(s)
==2590==    at 0x80688D4: ast_app_separate_args (app.c:1166)
==2590==    by 0x71BA104: array (func_strings.c:580)
==2590==    by 0x71BA4D3: hash_write (func_strings.c:641)
==2590==    by 0x80FD245: ast_func_write (pbx.c:3369)
==2590==    by 0x810E392: pbx_builtin_setvar_helper (pbx.c:8931)
==2590==    by 0x810E7BE: pbx_builtin_setvar (pbx.c:8998)
==2590==    by 0x80F6670: pbx_exec (pbx.c:1342)
==2590==    by 0x80FE122: pbx_extension_helper (pbx.c:3684)
==2590==    by 0x80FF43F: ast_spawn_extension (pbx.c:4137)
==2590==    by 0x80FFACB: __ast_pbx_run (pbx.c:4227)
==2590==    by 0x8100F53: pbx_thread (pbx.c:4514)
==2590==    by 0x81525CE: dummy_start (utils.c:968)
==2590== 
==2590== Conditional jump or move depends on uninitialised value(s)
==2590==    at 0x80687DC: ast_app_separate_args (app.c:1167)
==2590==    by 0x71BA104: array (func_strings.c:580)
==2590==    by 0x71BA4D3: hash_write (func_strings.c:641)
==2590==    by 0x80FD245: ast_func_write (pbx.c:3369)
==2590==    by 0x810E392: pbx_builtin_setvar_helper (pbx.c:8931)
==2590==    by 0x810E7BE: pbx_builtin_setvar (pbx.c:8998)
==2590==    by 0x80F6670: pbx_exec (pbx.c:1342)
==2590==    by 0x80FE122: pbx_extension_helper (pbx.c:3684)
==2590==    by 0x80FF43F: ast_spawn_extension (pbx.c:4137)
==2590==    by 0x80FFACB: __ast_pbx_run (pbx.c:4227)
==2590==    by 0x8100F53: pbx_thread (pbx.c:4514)
==2590==    by 0x81525CE: dummy_start (utils.c:968)
==2590== 
==2590== Conditional jump or move depends on uninitialised value(s)
==2590==    at 0x80687EF: ast_app_separate_args (app.c:1169)
==2590==    by 0x71BA104: array (func_strings.c:580)
==2590==    by 0x71BA4D3: hash_write (func_strings.c:641)
==2590==    by 0x80FD245: ast_func_write (pbx.c:3369)
==2590==    by 0x810E392: pbx_builtin_setvar_helper (pbx.c:8931)
==2590==    by 0x810E7BE: pbx_builtin_setvar (pbx.c:8998)
==2590==    by 0x80F6670: pbx_exec (pbx.c:1342)
==2590==    by 0x80FE122: pbx_extension_helper (pbx.c:3684)
==2590==    by 0x80FF43F: ast_spawn_extension (pbx.c:4137)
==2590==    by 0x80FFACB: __ast_pbx_run (pbx.c:4227)
==2590==    by 0x8100F53: pbx_thread (pbx.c:4514)
==2590==    by 0x81525CE: dummy_start (utils.c:968)
==2590== 
==2590== Conditional jump or move depends on uninitialised value(s)
==2590==    at 0x806880C: ast_app_separate_args (app.c:1173)
==2590==    by 0x71BA104: array (func_strings.c:580)
==2590==    by 0x71BA4D3: hash_write (func_strings.c:641)
==2590==    by 0x80FD245: ast_func_write (pbx.c:3369)
==2590==    by 0x810E392: pbx_builtin_setvar_helper (pbx.c:8931)
==2590==    by 0x810E7BE: pbx_builtin_setvar (pbx.c:8998)
==2590==    by 0x80F6670: pbx_exec (pbx.c:1342)
==2590==    by 0x80FE122: pbx_extension_helper (pbx.c:3684)
==2590==    by 0x80FF43F: ast_spawn_extension (pbx.c:4137)
==2590==    by 0x80FFACB: __ast_pbx_run (pbx.c:4227)
==2590==    by 0x8100F53: pbx_thread (pbx.c:4514)
==2590==    by 0x81525CE: dummy_start (utils.c:968)
==2590== 
==2590== Conditional jump or move depends on uninitialised value(s)
==2590==    at 0x8068865: ast_app_separate_args (app.c:1178)
==2590==    by 0x71BA104: array (func_strings.c:580)
==2590==    by 0x71BA4D3: hash_write (func_strings.c:641)
==2590==    by 0x80FD245: ast_func_write (pbx.c:3369)
==2590==    by 0x810E392: pbx_builtin_setvar_helper (pbx.c:8931)
==2590==    by 0x810E7BE: pbx_builtin_setvar (pbx.c:8998)
==2590==    by 0x80F6670: pbx_exec (pbx.c:1342)
==2590==    by 0x80FE122: pbx_extension_helper (pbx.c:3684)
==2590==    by 0x80FF43F: ast_spawn_extension (pbx.c:4137)
==2590==    by 0x80FFACB: __ast_pbx_run (pbx.c:4227)
==2590==    by 0x8100F53: pbx_thread (pbx.c:4514)
==2590==    by 0x81525CE: dummy_start (utils.c:968)
==2590== 
==2590== Conditional jump or move depends on uninitialised value(s)
==2590==    at 0x80688A8: ast_app_separate_args (app.c:1181)
==2590==    by 0x71BA104: array (func_strings.c:580)
==2590==    by 0x71BA4D3: hash_write (func_strings.c:641)
==2590==    by 0x80FD245: ast_func_write (pbx.c:3369)
==2590==    by 0x810E392: pbx_builtin_setvar_helper (pbx.c:8931)
==2590==    by 0x810E7BE: pbx_builtin_setvar (pbx.c:8998)
==2590==    by 0x80F6670: pbx_exec (pbx.c:1342)
==2590==    by 0x80FE122: pbx_extension_helper (pbx.c:3684)
==2590==    by 0x80FF43F: ast_spawn_extension (pbx.c:4137)
==2590==    by 0x80FFACB: __ast_pbx_run (pbx.c:4227)
==2590==    by 0x8100F53: pbx_thread (pbx.c:4514)
==2590==    by 0x81525CE: dummy_start (utils.c:968)
==2590== 
==2590== Conditional jump or move depends on uninitialised value(s)
==2590==    at 0x4006247: strlen (mc_replace_strmem.c:246)
==2590==    by 0x44F84D: vfprintf (in /lib/libc-2.5.so)
==2590==    by 0x46FFD3: vsnprintf (in /lib/libc-2.5.so)
==2590==    by 0x455AF4: snprintf (in /lib/libc-2.5.so)
==2590==    by 0x71BA225: array (func_strings.c:589)
==2590==    by 0x71BA4D3: hash_write (func_strings.c:641)
==2590==    by 0x80FD245: ast_func_write (pbx.c:3369)
==2590==    by 0x810E392: pbx_builtin_setvar_helper (pbx.c:8931)
==2590==    by 0x810E7BE: pbx_builtin_setvar (pbx.c:8998)
==2590==    by 0x80F6670: pbx_exec (pbx.c:1342)
==2590==    by 0x80FE122: pbx_extension_helper (pbx.c:3684)
==2590==    by 0x80FF43F: ast_spawn_extension (pbx.c:4137)
==2590== 
==2590== Conditional jump or move depends on uninitialised value(s)
==2590==    at 0x810E2F7: pbx_builtin_setvar_helper (pbx.c:8928)
==2590==    by 0x71BA248: array (func_strings.c:590)
==2590==    by 0x71BA4D3: hash_write (func_strings.c:641)
==2590==    by 0x80FD245: ast_func_write (pbx.c:3369)
==2590==    by 0x810E392: pbx_builtin_setvar_helper (pbx.c:8931)
==2590==    by 0x810E7BE: pbx_builtin_setvar (pbx.c:8998)
==2590==    by 0x80F6670: pbx_exec (pbx.c:1342)
==2590==    by 0x80FE122: pbx_extension_helper (pbx.c:3684)
==2590==    by 0x80FF43F: ast_spawn_extension (pbx.c:4137)
==2590==    by 0x80FFACB: __ast_pbx_run (pbx.c:4227)
==2590==    by 0x8100F53: pbx_thread (pbx.c:4514)
==2590==    by 0x81525CE: dummy_start (utils.c:968)
==2590== 
==2590== Conditional jump or move depends on uninitialised value(s)
==2590==    at 0x80A09F3: ast_var_assign (chanvars.c:41)
==2590==    by 0x810E557: pbx_builtin_setvar_helper (pbx.c:8962)
==2590==    by 0x71BA248: array (func_strings.c:590)
==2590==    by 0x71BA4D3: hash_write (func_strings.c:641)
==2590==    by 0x80FD245: ast_func_write (pbx.c:3369)
==2590==    by 0x810E392: pbx_builtin_setvar_helper (pbx.c:8931)
==2590==    by 0x810E7BE: pbx_builtin_setvar (pbx.c:8998)
==2590==    by 0x80F6670: pbx_exec (pbx.c:1342)
==2590==    by 0x80FE122: pbx_extension_helper (pbx.c:3684)
==2590==    by 0x80FF43F: ast_spawn_extension (pbx.c:4137)
==2590==    by 0x80FFACB: __ast_pbx_run (pbx.c:4227)
==2590==    by 0x8100F53: pbx_thread (pbx.c:4514)
==2590== 
==2590== Conditional jump or move depends on uninitialised value(s)
==2590==    at 0x815187A: ast_copy_string (strings.h:207)
==2590==    by 0x80A0A86: ast_var_assign (chanvars.c:52)
==2590==    by 0x810E557: pbx_builtin_setvar_helper (pbx.c:8962)
==2590==    by 0x71BA248: array (func_strings.c:590)
==2590==    by 0x71BA4D3: hash_write (func_strings.c:641)
==2590==    by 0x80FD245: ast_func_write (pbx.c:3369)
==2590==    by 0x810E392: pbx_builtin_setvar_helper (pbx.c:8931)
==2590==    by 0x810E7BE: pbx_builtin_setvar (pbx.c:8998)
==2590==    by 0x80F6670: pbx_exec (pbx.c:1342)
==2590==    by 0x80FE122: pbx_extension_helper (pbx.c:3684)
==2590==    by 0x80FF43F: ast_spawn_extension (pbx.c:4137)
==2590==    by 0x80FFACB: __ast_pbx_run (pbx.c:4227)