==3978== Memcheck, a memory error detector.
==3978== Copyright (C) 2002-2006, and GNU GPL'd, by Julian Seward et al.
==3978== Using LibVEX rev 1658, a library for dynamic binary translation.
==3978== Copyright (C) 2004-2006, and GNU GPL'd, by OpenWorks LLP.
==3978== Using valgrind-3.2.1, a dynamic binary instrumentation framework.
==3978== Copyright (C) 2000-2006, and GNU GPL'd, by Julian Seward et al.
==3978== For more details, rerun with: -v
==3978== 
==3978== My PID = 3978, parent PID = 3764.  Prog and args are:
==3978==    asterisk
==3978==    -vvvvcg
==3978== 
==3978== Invalid read of size 1
==3978==    at 0x4003DD: _dl_close (in /lib/ld-2.5.so)
==3978==    by 0x555CE3: dlclose_doit (in /lib/libdl-2.5.so)
==3978==    by 0x3FAE25: _dl_catch_error (in /lib/ld-2.5.so)
==3978==    by 0x5562CB: _dlerror_run (in /lib/libdl-2.5.so)
==3978==    by 0x555D19: dlclose (in /lib/libdl-2.5.so)
==3978==    by 0x80E2DC2: load_dynamic_module (loader.c:402)
==3978==    by 0x80E38B2: load_resource (loader.c:664)
==3978==    by 0x80E4230: load_modules (loader.c:879)
==3978==    by 0x807E115: main (asterisk.c:3548)
==3978==  Address 0x43F29F4 is 516 bytes inside a block of size 654 free'd
==3978==    at 0x4004FDA: free (vg_replace_malloc.c:233)
==3978==    by 0x3FFF8C: _dl_close_worker (in /lib/ld-2.5.so)
==3978==    by 0x400406: _dl_close (in /lib/ld-2.5.so)
==3978==    by 0x555CE3: dlclose_doit (in /lib/libdl-2.5.so)
==3978==    by 0x3FAE25: _dl_catch_error (in /lib/ld-2.5.so)
==3978==    by 0x5562CB: _dlerror_run (in /lib/libdl-2.5.so)
==3978==    by 0x555D19: dlclose (in /lib/libdl-2.5.so)
==3978==    by 0x80E2DC2: load_dynamic_module (loader.c:402)
==3978==    by 0x80E38B2: load_resource (loader.c:664)
==3978==    by 0x80E4230: load_modules (loader.c:879)
==3978==    by 0x807E115: main (asterisk.c:3548)
==3978== 
==3978== Invalid read of size 4
==3978==    at 0x4003E6: _dl_close (in /lib/ld-2.5.so)
==3978==    by 0x555CE3: dlclose_doit (in /lib/libdl-2.5.so)
==3978==    by 0x3FAE25: _dl_catch_error (in /lib/ld-2.5.so)
==3978==    by 0x5562CB: _dlerror_run (in /lib/libdl-2.5.so)
==3978==    by 0x555D19: dlclose (in /lib/libdl-2.5.so)
==3978==    by 0x80E2DC2: load_dynamic_module (loader.c:402)
==3978==    by 0x80E38B2: load_resource (loader.c:664)
==3978==    by 0x80E4230: load_modules (loader.c:879)
==3978==    by 0x807E115: main (asterisk.c:3548)
==3978==  Address 0x43F2978 is 392 bytes inside a block of size 654 free'd
==3978==    at 0x4004FDA: free (vg_replace_malloc.c:233)
==3978==    by 0x3FFF8C: _dl_close_worker (in /lib/ld-2.5.so)
==3978==    by 0x400406: _dl_close (in /lib/ld-2.5.so)
==3978==    by 0x555CE3: dlclose_doit (in /lib/libdl-2.5.so)
==3978==    by 0x3FAE25: _dl_catch_error (in /lib/ld-2.5.so)
==3978==    by 0x5562CB: _dlerror_run (in /lib/libdl-2.5.so)
==3978==    by 0x555D19: dlclose (in /lib/libdl-2.5.so)
==3978==    by 0x80E2DC2: load_dynamic_module (loader.c:402)
==3978==    by 0x80E38B2: load_resource (loader.c:664)
==3978==    by 0x80E4230: load_modules (loader.c:879)
==3978==    by 0x807E115: main (asterisk.c:3548)
==3978== 
==3978== Invalid read of size 4
==3978==    at 0x40041D: _dl_close (in /lib/ld-2.5.so)
==3978==    by 0x555CE3: dlclose_doit (in /lib/libdl-2.5.so)
==3978==    by 0x3FAE25: _dl_catch_error (in /lib/ld-2.5.so)
==3978==    by 0x5562CB: _dlerror_run (in /lib/libdl-2.5.so)
==3978==    by 0x555D19: dlclose (in /lib/libdl-2.5.so)
==3978==    by 0x80E2DC2: load_dynamic_module (loader.c:402)
==3978==    by 0x80E38B2: load_resource (loader.c:664)
==3978==    by 0x80E4230: load_modules (loader.c:879)
==3978==    by 0x807E115: main (asterisk.c:3548)
==3978==  Address 0x43F27F4 is 4 bytes inside a block of size 654 free'd
==3978==    at 0x4004FDA: free (vg_replace_malloc.c:233)
==3978==    by 0x3FFF8C: _dl_close_worker (in /lib/ld-2.5.so)
==3978==    by 0x400406: _dl_close (in /lib/ld-2.5.so)
==3978==    by 0x555CE3: dlclose_doit (in /lib/libdl-2.5.so)
==3978==    by 0x3FAE25: _dl_catch_error (in /lib/ld-2.5.so)
==3978==    by 0x5562CB: _dlerror_run (in /lib/libdl-2.5.so)
==3978==    by 0x555D19: dlclose (in /lib/libdl-2.5.so)
==3978==    by 0x80E2DC2: load_dynamic_module (loader.c:402)
==3978==    by 0x80E38B2: load_resource (loader.c:664)
==3978==    by 0x80E4230: load_modules (loader.c:879)
==3978==    by 0x807E115: main (asterisk.c:3548)
==3978== 
==3978== Invalid read of size 1
==3978==    at 0x4006258: strlen (mc_replace_strmem.c:247)
==3978==    by 0x3FAF21: _dl_signal_error (in /lib/ld-2.5.so)
==3978==    by 0x400432: _dl_close (in /lib/ld-2.5.so)
==3978==    by 0x555CE3: dlclose_doit (in /lib/libdl-2.5.so)
==3978==    by 0x3FAE25: _dl_catch_error (in /lib/ld-2.5.so)
==3978==    by 0x5562CB: _dlerror_run (in /lib/libdl-2.5.so)
==3978==    by 0x555D19: dlclose (in /lib/libdl-2.5.so)
==3978==    by 0x80E2DC2: load_dynamic_module (loader.c:402)
==3978==    by 0x80E38B2: load_resource (loader.c:664)
==3978==    by 0x80E4230: load_modules (loader.c:879)
==3978==    by 0x807E115: main (asterisk.c:3548)
==3978==  Address 0x43F2790 is 0 bytes inside a block of size 46 free'd
==3978==    at 0x4004FDA: free (vg_replace_malloc.c:233)
==3978==    by 0x3FFF05: _dl_close_worker (in /lib/ld-2.5.so)
==3978==    by 0x400406: _dl_close (in /lib/ld-2.5.so)
==3978==    by 0x555CE3: dlclose_doit (in /lib/libdl-2.5.so)
==3978==    by 0x3FAE25: _dl_catch_error (in /lib/ld-2.5.so)
==3978==    by 0x5562CB: _dlerror_run (in /lib/libdl-2.5.so)
==3978==    by 0x555D19: dlclose (in /lib/libdl-2.5.so)
==3978==    by 0x80E2DC2: load_dynamic_module (loader.c:402)
==3978==    by 0x80E38B2: load_resource (loader.c:664)
==3978==    by 0x80E4230: load_modules (loader.c:879)
==3978==    by 0x807E115: main (asterisk.c:3548)
==3978== 
==3978== Invalid read of size 1
==3978==    at 0x4006263: strlen (mc_replace_strmem.c:247)
==3978==    by 0x3FAF21: _dl_signal_error (in /lib/ld-2.5.so)
==3978==    by 0x400432: _dl_close (in /lib/ld-2.5.so)
==3978==    by 0x555CE3: dlclose_doit (in /lib/libdl-2.5.so)
==3978==    by 0x3FAE25: _dl_catch_error (in /lib/ld-2.5.so)
==3978==    by 0x5562CB: _dlerror_run (in /lib/libdl-2.5.so)
==3978==    by 0x555D19: dlclose (in /lib/libdl-2.5.so)
==3978==    by 0x80E2DC2: load_dynamic_module (loader.c:402)
==3978==    by 0x80E38B2: load_resource (loader.c:664)
==3978==    by 0x80E4230: load_modules (loader.c:879)
==3978==    by 0x807E115: main (asterisk.c:3548)
==3978==  Address 0x43F2791 is 1 bytes inside a block of size 46 free'd
==3978==    at 0x4004FDA: free (vg_replace_malloc.c:233)
==3978==    by 0x3FFF05: _dl_close_worker (in /lib/ld-2.5.so)
==3978==    by 0x400406: _dl_close (in /lib/ld-2.5.so)
==3978==    by 0x555CE3: dlclose_doit (in /lib/libdl-2.5.so)
==3978==    by 0x3FAE25: _dl_catch_error (in /lib/ld-2.5.so)
==3978==    by 0x5562CB: _dlerror_run (in /lib/libdl-2.5.so)
==3978==    by 0x555D19: dlclose (in /lib/libdl-2.5.so)
==3978==    by 0x80E2DC2: load_dynamic_module (loader.c:402)
==3978==    by 0x80E38B2: load_resource (loader.c:664)
==3978==    by 0x80E4230: load_modules (loader.c:879)
==3978==    by 0x807E115: main (asterisk.c:3548)
==3978== 
==3978== Invalid read of size 2
==3978==    at 0x402CFA: memcpy (in /lib/ld-2.5.so)
==3978==    by 0x400432: _dl_close (in /lib/ld-2.5.so)
==3978==    by 0x555CE3: dlclose_doit (in /lib/libdl-2.5.so)
==3978==    by 0x3FAE25: _dl_catch_error (in /lib/ld-2.5.so)
==3978==    by 0x5562CB: _dlerror_run (in /lib/libdl-2.5.so)
==3978==    by 0x555D19: dlclose (in /lib/libdl-2.5.so)
==3978==    by 0x80E2DC2: load_dynamic_module (loader.c:402)
==3978==    by 0x80E38B2: load_resource (loader.c:664)
==3978==    by 0x80E4230: load_modules (loader.c:879)
==3978==    by 0x807E115: main (asterisk.c:3548)
==3978==  Address 0x43F2790 is 0 bytes inside a block of size 46 free'd
==3978==    at 0x4004FDA: free (vg_replace_malloc.c:233)
==3978==    by 0x3FFF05: _dl_close_worker (in /lib/ld-2.5.so)
==3978==    by 0x400406: _dl_close (in /lib/ld-2.5.so)
==3978==    by 0x555CE3: dlclose_doit (in /lib/libdl-2.5.so)
==3978==    by 0x3FAE25: _dl_catch_error (in /lib/ld-2.5.so)
==3978==    by 0x5562CB: _dlerror_run (in /lib/libdl-2.5.so)
==3978==    by 0x555D19: dlclose (in /lib/libdl-2.5.so)
==3978==    by 0x80E2DC2: load_dynamic_module (loader.c:402)
==3978==    by 0x80E38B2: load_resource (loader.c:664)
==3978==    by 0x80E4230: load_modules (loader.c:879)
==3978==    by 0x807E115: main (asterisk.c:3548)
==3978== 
==3978== Invalid read of size 4
==3978==    at 0x402CFC: memcpy (in /lib/ld-2.5.so)
==3978==    by 0x400432: _dl_close (in /lib/ld-2.5.so)
==3978==    by 0x555CE3: dlclose_doit (in /lib/libdl-2.5.so)
==3978==    by 0x3FAE25: _dl_catch_error (in /lib/ld-2.5.so)
==3978==    by 0x5562CB: _dlerror_run (in /lib/libdl-2.5.so)
==3978==    by 0x555D19: dlclose (in /lib/libdl-2.5.so)
==3978==    by 0x80E2DC2: load_dynamic_module (loader.c:402)
==3978==    by 0x80E38B2: load_resource (loader.c:664)
==3978==    by 0x80E4230: load_modules (loader.c:879)
==3978==    by 0x807E115: main (asterisk.c:3548)
==3978==  Address 0x43F2792 is 2 bytes inside a block of size 46 free'd
==3978==    at 0x4004FDA: free (vg_replace_malloc.c:233)
==3978==    by 0x3FFF05: _dl_close_worker (in /lib/ld-2.5.so)
==3978==    by 0x400406: _dl_close (in /lib/ld-2.5.so)
==3978==    by 0x555CE3: dlclose_doit (in /lib/libdl-2.5.so)
==3978==    by 0x3FAE25: _dl_catch_error (in /lib/ld-2.5.so)
==3978==    by 0x5562CB: _dlerror_run (in /lib/libdl-2.5.so)
==3978==    by 0x555D19: dlclose (in /lib/libdl-2.5.so)
==3978==    by 0x80E2DC2: load_dynamic_module (loader.c:402)
==3978==    by 0x80E38B2: load_resource (loader.c:664)
==3978==    by 0x80E4230: load_modules (loader.c:879)
==3978==    by 0x807E115: main (asterisk.c:3548)
==3978== 
==3978== Invalid read of size 1
==3978==    at 0x402CF5: memcpy (in /lib/ld-2.5.so)
==3978==    by 0x400432: _dl_close (in /lib/ld-2.5.so)
==3978==    by 0x555CE3: dlclose_doit (in /lib/libdl-2.5.so)
==3978==    by 0x3FAE25: _dl_catch_error (in /lib/ld-2.5.so)
==3978==    by 0x5562CB: _dlerror_run (in /lib/libdl-2.5.so)
==3978==    by 0x555D19: dlclose (in /lib/libdl-2.5.so)
==3978==    by 0x80E2DC2: load_dynamic_module (loader.c:402)
==3978==    by 0x80E38B2: load_resource (loader.c:664)
==3978==    by 0x80E4230: load_modules (loader.c:879)
==3978==    by 0x807E308: main (asterisk.c:3613)
==3978==  Address 0x48BE138 is 0 bytes inside a block of size 45 free'd
==3978==    at 0x4004FDA: free (vg_replace_malloc.c:233)
==3978==    by 0x3FFF05: _dl_close_worker (in /lib/ld-2.5.so)
==3978==    by 0x400406: _dl_close (in /lib/ld-2.5.so)
==3978==    by 0x555CE3: dlclose_doit (in /lib/libdl-2.5.so)
==3978==    by 0x3FAE25: _dl_catch_error (in /lib/ld-2.5.so)
==3978==    by 0x5562CB: _dlerror_run (in /lib/libdl-2.5.so)
==3978==    by 0x555D19: dlclose (in /lib/libdl-2.5.so)
==3978==    by 0x80E2DC2: load_dynamic_module (loader.c:402)
==3978==    by 0x80E38B2: load_resource (loader.c:664)
==3978==    by 0x80E4230: load_modules (loader.c:879)
==3978==    by 0x807E308: main (asterisk.c:3613)
==3978== 
==3978== Conditional jump or move depends on uninitialised value(s)
==3978==    at 0x55FAF8D: sqlchar_as_sqlwchar (in /usr/lib/libmyodbc5-5.1.5.so)
==3978==    by 0x55E571C: SQLConnect (in /usr/lib/libmyodbc5-5.1.5.so)
==3978==    by 0x52446DB: SQLConnect (SQLConnect.c:3884)
==3978==    by 0x52277DB: odbc_obj_connect (res_odbc.c:1439)
==3978==    by 0x5226E63: ast_odbc_request_obj2 (res_odbc.c:1267)
==3978==    by 0x5227295: ast_odbc_request_obj (res_odbc.c:1333)
==3978==    by 0x5225AFB: odbc_register_class (res_odbc.c:964)
==3978==    by 0x52254B8: load_odbc_config (res_odbc.c:859)
==3978==    by 0x522860E: load_module (res_odbc.c:1680)
==3978==    by 0x80E39EB: load_resource (loader.c:695)
==3978==    by 0x80E4230: load_modules (loader.c:879)
==3978==    by 0x807E308: main (asterisk.c:3613)
==3978== 
==3978== Conditional jump or move depends on uninitialised value(s)
==3978==    at 0x55FAF8D: sqlchar_as_sqlwchar (in /usr/lib/libmyodbc5-5.1.5.so)
==3978==    by 0x55E5731: SQLConnect (in /usr/lib/libmyodbc5-5.1.5.so)
==3978==    by 0x52446DB: SQLConnect (SQLConnect.c:3884)
==3978==    by 0x52277DB: odbc_obj_connect (res_odbc.c:1439)
==3978==    by 0x5226E63: ast_odbc_request_obj2 (res_odbc.c:1267)
==3978==    by 0x5227295: ast_odbc_request_obj (res_odbc.c:1333)
==3978==    by 0x5225AFB: odbc_register_class (res_odbc.c:964)
==3978==    by 0x52254B8: load_odbc_config (res_odbc.c:859)
==3978==    by 0x522860E: load_module (res_odbc.c:1680)
==3978==    by 0x80E39EB: load_resource (loader.c:695)
==3978==    by 0x80E4230: load_modules (loader.c:879)
==3978==    by 0x807E308: main (asterisk.c:3613)
==3978== 
==3978== Conditional jump or move depends on uninitialised value(s)
==3978==    at 0x55FAF8D: sqlchar_as_sqlwchar (in /usr/lib/libmyodbc5-5.1.5.so)
==3978==    by 0x55E5748: SQLConnect (in /usr/lib/libmyodbc5-5.1.5.so)
==3978==    by 0x52446DB: SQLConnect (SQLConnect.c:3884)
==3978==    by 0x52277DB: odbc_obj_connect (res_odbc.c:1439)
==3978==    by 0x5226E63: ast_odbc_request_obj2 (res_odbc.c:1267)
==3978==    by 0x5227295: ast_odbc_request_obj (res_odbc.c:1333)
==3978==    by 0x5225AFB: odbc_register_class (res_odbc.c:964)
==3978==    by 0x52254B8: load_odbc_config (res_odbc.c:859)
==3978==    by 0x522860E: load_module (res_odbc.c:1680)
==3978==    by 0x80E39EB: load_resource (loader.c:695)
==3978==    by 0x80E4230: load_modules (loader.c:879)
==3978==    by 0x807E308: main (asterisk.c:3613)
==3978== 
==3978== Conditional jump or move depends on uninitialised value(s)
==3978==    at 0x7FD192C: speex_decode_int (speex.c:167)
==3978==    by 0x8B7E2B8: speextolin_framein (codec_speex.c:196)
==3978==    by 0x814AB86: framein (translate.c:194)
==3978==    by 0x814B74D: calc_cost (translate.c:421)
==3978==    by 0x814C84F: __ast_register_translator (translate.c:681)
==3978==    by 0x8B7F8C6: load_module (codec_speex.c:458)
==3978==    by 0x80E39EB: load_resource (loader.c:695)
==3978==    by 0x80E435B: load_modules (loader.c:899)
==3978==    by 0x807E308: main (asterisk.c:3613)
==3978== 
==3978== Conditional jump or move depends on uninitialised value(s)
==3978==    at 0x7FD1935: speex_decode_int (speex.c:169)
==3978==    by 0x8B7E2B8: speextolin_framein (codec_speex.c:196)
==3978==    by 0x814AB86: framein (translate.c:194)
==3978==    by 0x814B74D: calc_cost (translate.c:421)
==3978==    by 0x814C84F: __ast_register_translator (translate.c:681)
==3978==    by 0x8B7F8C6: load_module (codec_speex.c:458)
==3978==    by 0x80E39EB: load_resource (loader.c:695)
==3978==    by 0x80E435B: load_modules (loader.c:899)
==3978==    by 0x807E308: main (asterisk.c:3613)
==3978== Warning: noted but unhandled ioctl 0xDA34 with no size/direction hints
==3978==    This could cause spurious value errors to appear.
==3978==    See README_MISSING_SYSCALL_OR_IOCTL for guidance on writing a proper wrapper.
==3978== Warning: noted but unhandled ioctl 0xDA34 with no size/direction hints
==3978==    This could cause spurious value errors to appear.
==3978==    See README_MISSING_SYSCALL_OR_IOCTL for guidance on writing a proper wrapper.
==3978== Warning: noted but unhandled ioctl 0xDA35 with no size/direction hints
==3978==    This could cause spurious value errors to appear.
==3978==    See README_MISSING_SYSCALL_OR_IOCTL for guidance on writing a proper wrapper.
==3978== 
==3978== Thread 40:
==3978== Invalid write of size 1
==3978==    at 0x81442DE: __ast_str_helper2 (strings.c:162)
==3978==    by 0x8151B60: ast_str_append_escapecommas (strings.h:777)
==3978==    by 0x7EC13ED: acf_odbc_read (func_odbc.c:547)
==3978==    by 0x80FCF3B: ast_func_read (pbx.c:3346)
==3978==    by 0x80FD47C: pbx_substitute_variables_helper_full (pbx.c:3481)
==3978==    by 0x80FDA20: pbx_substitute_variables_helper (pbx.c:3576)
==3978==    by 0x80FDB00: pbx_substitute_variables (pbx.c:3599)
==3978==    by 0x80FDD28: pbx_extension_helper (pbx.c:3661)
==3978==    by 0x80FF2CF: ast_spawn_extension (pbx.c:4137)
==3978==    by 0x80FF95B: __ast_pbx_run (pbx.c:4227)
==3978==    by 0x8100DE3: pbx_thread (pbx.c:4514)
==3978==    by 0x8152482: dummy_start (utils.c:968)
==3978==  Address 0x6218A1C is 0 bytes after a block of size 28 alloc'd
==3978==    at 0x40046FF: calloc (vg_replace_malloc.c:279)
==3978==    by 0x8151370: _ast_calloc (utils.h:457)
==3978==    by 0x81515D6: ast_threadstorage_get (threadstorage.h:167)
==3978==    by 0x81519E1: ast_str_thread_get (strings.h:607)
==3978==    by 0x7EC09D4: acf_odbc_read (func_odbc.c:380)
==3978==    by 0x80FCF3B: ast_func_read (pbx.c:3346)
==3978==    by 0x80FD47C: pbx_substitute_variables_helper_full (pbx.c:3481)
==3978==    by 0x80FDA20: pbx_substitute_variables_helper (pbx.c:3576)
==3978==    by 0x80FDB00: pbx_substitute_variables (pbx.c:3599)
==3978==    by 0x80FDD28: pbx_extension_helper (pbx.c:3661)
==3978==    by 0x80FF2CF: ast_spawn_extension (pbx.c:4137)
==3978==    by 0x80FF95B: __ast_pbx_run (pbx.c:4227)
==4028== 
==4028== ERROR SUMMARY: 26325 errors from 14 contexts (suppressed: 932 from 1)
==4028== malloc/free: in use at exit: 4,291,974 bytes in 45,800 blocks.
==4028== malloc/free: 192,486 allocs, 146,686 frees, 14,120,888 bytes allocated.
==4028== For counts of detected errors, rerun with: -v
==4028== searching for pointers to 45,800 not-freed blocks.
==4028== checked 11,297,468 bytes.
==4028== 
==4028== LEAK SUMMARY:
==4028==    definitely lost: 100,475 bytes in 608 blocks.
==4028==      possibly lost: 586,180 bytes in 396 blocks.
==4028==    still reachable: 3,605,319 bytes in 44,796 blocks.
==4028==         suppressed: 0 bytes in 0 blocks.
==4028== Use --leak-check=full to see details of leaked memory.
==3978== 
==3978== ERROR SUMMARY: 26329 errors from 14 contexts (suppressed: 932 from 1)
==3978== malloc/free: in use at exit: 2,546,216 bytes in 19,658 blocks.
==3978== malloc/free: 195,490 allocs, 175,832 frees, 15,343,410 bytes allocated.
==3978== For counts of detected errors, rerun with: -v
==3978== searching for pointers to 19,658 not-freed blocks.
==3978== checked 18,456,716 bytes.
==3978== 
==3978== LEAK SUMMARY:
==3978==    definitely lost: 76,795 bytes in 592 blocks.
==3978==      possibly lost: 591,740 bytes in 433 blocks.
==3978==    still reachable: 1,877,681 bytes in 18,633 blocks.
==3978==         suppressed: 0 bytes in 0 blocks.
==3978== Use --leak-check=full to see details of leaked memory.