==28750== Memcheck, a memory error detector. ==28750== Copyright (C) 2002-2005, and GNU GPL'd, by Julian Seward et al. ==28750== Using LibVEX rev 1575, a library for dynamic binary translation. ==28750== Copyright (C) 2004-2005, and GNU GPL'd, by OpenWorks LLP. ==28750== Using valgrind-3.1.1, a dynamic binary instrumentation framework. ==28750== Copyright (C) 2000-2005, and GNU GPL'd, by Julian Seward et al. ==28750== For more details, rerun with: -v ==28750== ==28750== My PID = 28750, parent PID = 26742. Prog and args are: ==28750== asterisk ==28750== -vvvvcg ==28750== --28750-- DWARF2 CFI reader: unhandled CFI instruction 0:50 --28750-- DWARF2 CFI reader: unhandled CFI instruction 0:50 --28750-- DWARF2 CFI reader: unhandled CFI instruction 0:50 --28750-- DWARF2 CFI reader: unhandled CFI instruction 0:50 ==28750== Invalid read of size 4 ==28750== at 0xA1519B: _dl_close (in /lib/tls/i486/libc-2.3.4.so) ==28750== by 0xA6CD2C: dlclose_doit (in /lib/libdl-2.3.4.so) ==28750== by 0x918160: _dl_catch_error (in /lib/ld-2.3.4.so) ==28750== by 0xA6D21F: _dlerror_run (in /lib/libdl-2.3.4.so) ==28750== by 0xA6CD5C: dlclose (in /lib/libdl-2.3.4.so) ==28750== by 0x80DEC6B: load_resource (loader.c:412) ==28750== by 0x80DEF68: load_resource_list (loader.c:884) ==28750== by 0x80DF5AE: load_modules (loader.c:1047) ==28750== by 0x80793E8: main (asterisk.c:3656) ==28750== Address 0x40C2040 is 24 bytes inside a block of size 628 free'd ==28750== at 0x4004EFA: free (vg_replace_malloc.c:235) ==28750== by 0xA156C4: _dl_close (in /lib/tls/i486/libc-2.3.4.so) ==28750== by 0xA6CD2C: dlclose_doit (in /lib/libdl-2.3.4.so) ==28750== by 0x918160: _dl_catch_error (in /lib/ld-2.3.4.so) ==28750== by 0xA6D21F: _dlerror_run (in /lib/libdl-2.3.4.so) ==28750== by 0xA6CD5C: dlclose (in /lib/libdl-2.3.4.so) ==28750== by 0x80DEC6B: load_resource (loader.c:412) ==28750== by 0x80DEF68: load_resource_list (loader.c:884) ==28750== by 0x80DF5AE: load_modules (loader.c:1047) ==28750== by 0x80793E8: main (asterisk.c:3656) ==28750== ==28750== Invalid read of size 1 ==28750== at 0xA1519E: _dl_close (in /lib/tls/i486/libc-2.3.4.so) ==28750== by 0xA6CD2C: dlclose_doit (in /lib/libdl-2.3.4.so) ==28750== by 0x918160: _dl_catch_error (in /lib/ld-2.3.4.so) ==28750== by 0xA6D21F: _dlerror_run (in /lib/libdl-2.3.4.so) ==28750== by 0xA6CD5C: dlclose (in /lib/libdl-2.3.4.so) ==28750== by 0x80DEC6B: load_resource (loader.c:412) ==28750== by 0x80DEF68: load_resource_list (loader.c:884) ==28750== by 0x80DF5AE: load_modules (loader.c:1047) ==28750== by 0x80793E8: main (asterisk.c:3656) ==28750== Address 0x40C2220 is 504 bytes inside a block of size 628 free'd ==28750== at 0x4004EFA: free (vg_replace_malloc.c:235) ==28750== by 0xA156C4: _dl_close (in /lib/tls/i486/libc-2.3.4.so) ==28750== by 0xA6CD2C: dlclose_doit (in /lib/libdl-2.3.4.so) ==28750== by 0x918160: _dl_catch_error (in /lib/ld-2.3.4.so) ==28750== by 0xA6D21F: _dlerror_run (in /lib/libdl-2.3.4.so) ==28750== by 0xA6CD5C: dlclose (in /lib/libdl-2.3.4.so) ==28750== by 0x80DEC6B: load_resource (loader.c:412) ==28750== by 0x80DEF68: load_resource_list (loader.c:884) ==28750== by 0x80DF5AE: load_modules (loader.c:1047) ==28750== by 0x80793E8: main (asterisk.c:3656) ==28750== ==28750== Invalid read of size 4 ==28750== at 0xA151B4: _dl_close (in /lib/tls/i486/libc-2.3.4.so) ==28750== by 0xA6CD2C: dlclose_doit (in /lib/libdl-2.3.4.so) ==28750== by 0x918160: _dl_catch_error (in /lib/ld-2.3.4.so) ==28750== by 0xA6D21F: _dlerror_run (in /lib/libdl-2.3.4.so) ==28750== by 0xA6CD5C: dlclose (in /lib/libdl-2.3.4.so) ==28750== by 0x80DEC6B: load_resource (loader.c:412) ==28750== by 0x80DEF68: load_resource_list (loader.c:884) ==28750== by 0x80DF5AE: load_modules (loader.c:1047) ==28750== by 0x80793E8: main (asterisk.c:3656) ==28750== Address 0x40C21A4 is 380 bytes inside a block of size 628 free'd ==28750== at 0x4004EFA: free (vg_replace_malloc.c:235) ==28750== by 0xA156C4: _dl_close (in /lib/tls/i486/libc-2.3.4.so) ==28750== by 0xA6CD2C: dlclose_doit (in /lib/libdl-2.3.4.so) ==28750== by 0x918160: _dl_catch_error (in /lib/ld-2.3.4.so) ==28750== by 0xA6D21F: _dlerror_run (in /lib/libdl-2.3.4.so) ==28750== by 0xA6CD5C: dlclose (in /lib/libdl-2.3.4.so) ==28750== by 0x80DEC6B: load_resource (loader.c:412) ==28750== by 0x80DEF68: load_resource_list (loader.c:884) ==28750== by 0x80DF5AE: load_modules (loader.c:1047) ==28750== by 0x80793E8: main (asterisk.c:3656) ==28750== ==28750== Invalid read of size 4 ==28750== at 0xA158CC: _dl_close (in /lib/tls/i486/libc-2.3.4.so) ==28750== by 0xA6CD2C: dlclose_doit (in /lib/libdl-2.3.4.so) ==28750== by 0x918160: _dl_catch_error (in /lib/ld-2.3.4.so) ==28750== by 0xA6D21F: _dlerror_run (in /lib/libdl-2.3.4.so) ==28750== by 0xA6CD5C: dlclose (in /lib/libdl-2.3.4.so) ==28750== by 0x80DEC6B: load_resource (loader.c:412) ==28750== by 0x80DEF68: load_resource_list (loader.c:884) ==28750== by 0x80DF5AE: load_modules (loader.c:1047) ==28750== by 0x80793E8: main (asterisk.c:3656) ==28750== Address 0x40C202C is 4 bytes inside a block of size 628 free'd ==28750== at 0x4004EFA: free (vg_replace_malloc.c:235) ==28750== by 0xA156C4: _dl_close (in /lib/tls/i486/libc-2.3.4.so) ==28750== by 0xA6CD2C: dlclose_doit (in /lib/libdl-2.3.4.so) ==28750== by 0x918160: _dl_catch_error (in /lib/ld-2.3.4.so) ==28750== by 0xA6D21F: _dlerror_run (in /lib/libdl-2.3.4.so) ==28750== by 0xA6CD5C: dlclose (in /lib/libdl-2.3.4.so) ==28750== by 0x80DEC6B: load_resource (loader.c:412) ==28750== by 0x80DEF68: load_resource_list (loader.c:884) ==28750== by 0x80DF5AE: load_modules (loader.c:1047) ==28750== by 0x80793E8: main (asterisk.c:3656) ==28750== ==28750== Invalid read of size 1 ==28750== at 0x917EF3: _dl_signal_error (in /lib/ld-2.3.4.so) ==28750== by 0xA158E8: _dl_close (in /lib/tls/i486/libc-2.3.4.so) ==28750== by 0xA6CD2C: dlclose_doit (in /lib/libdl-2.3.4.so) ==28750== by 0x918160: _dl_catch_error (in /lib/ld-2.3.4.so) ==28750== by 0xA6D21F: _dlerror_run (in /lib/libdl-2.3.4.so) ==28750== by 0xA6CD5C: dlclose (in /lib/libdl-2.3.4.so) ==28750== by 0x80DEC6B: load_resource (loader.c:412) ==28750== by 0x80DEF68: load_resource_list (loader.c:884) ==28750== by 0x80DF5AE: load_modules (loader.c:1047) ==28750== by 0x80793E8: main (asterisk.c:3656) ==28750== Address 0x40C1FD0 is 0 bytes inside a block of size 40 free'd ==28750== at 0x4004EFA: free (vg_replace_malloc.c:235) ==28750== by 0xA1562B: _dl_close (in /lib/tls/i486/libc-2.3.4.so) ==28750== by 0xA6CD2C: dlclose_doit (in /lib/libdl-2.3.4.so) ==28750== by 0x918160: _dl_catch_error (in /lib/ld-2.3.4.so) ==28750== by 0xA6D21F: _dlerror_run (in /lib/libdl-2.3.4.so) ==28750== by 0xA6CD5C: dlclose (in /lib/libdl-2.3.4.so) ==28750== by 0x80DEC6B: load_resource (loader.c:412) ==28750== by 0x80DEF68: load_resource_list (loader.c:884) ==28750== by 0x80DF5AE: load_modules (loader.c:1047) ==28750== by 0x80793E8: main (asterisk.c:3656) ==28750== ==28750== Invalid read of size 1 ==28750== at 0x91DBC4: memcpy (in /lib/ld-2.3.4.so) ==28750== by 0x917F4A: _dl_signal_error (in /lib/ld-2.3.4.so) ==28750== by 0xA158E8: _dl_close (in /lib/tls/i486/libc-2.3.4.so) ==28750== by 0xA6CD2C: dlclose_doit (in /lib/libdl-2.3.4.so) ==28750== by 0x918160: _dl_catch_error (in /lib/ld-2.3.4.so) ==28750== by 0xA6D21F: _dlerror_run (in /lib/libdl-2.3.4.so) ==28750== by 0xA6CD5C: dlclose (in /lib/libdl-2.3.4.so) ==28750== by 0x80DEC6B: load_resource (loader.c:412) ==28750== by 0x80DEF68: load_resource_list (loader.c:884) ==28750== by 0x80DF5AE: load_modules (loader.c:1047) ==28750== by 0x80793E8: main (asterisk.c:3656) ==28750== Address 0x40C1FD0 is 0 bytes inside a block of size 40 free'd ==28750== at 0x4004EFA: free (vg_replace_malloc.c:235) ==28750== by 0xA1562B: _dl_close (in /lib/tls/i486/libc-2.3.4.so) ==28750== by 0xA6CD2C: dlclose_doit (in /lib/libdl-2.3.4.so) ==28750== by 0x918160: _dl_catch_error (in /lib/ld-2.3.4.so) ==28750== by 0xA6D21F: _dlerror_run (in /lib/libdl-2.3.4.so) ==28750== by 0xA6CD5C: dlclose (in /lib/libdl-2.3.4.so) ==28750== by 0x80DEC6B: load_resource (loader.c:412) ==28750== by 0x80DEF68: load_resource_list (loader.c:884) ==28750== by 0x80DF5AE: load_modules (loader.c:1047) ==28750== by 0x80793E8: main (asterisk.c:3656) ==28750== ==28750== Invalid read of size 4 ==28750== at 0x91DBCC: memcpy (in /lib/ld-2.3.4.so) ==28750== by 0x917F4A: _dl_signal_error (in /lib/ld-2.3.4.so) ==28750== by 0xA158E8: _dl_close (in /lib/tls/i486/libc-2.3.4.so) ==28750== by 0xA6CD2C: dlclose_doit (in /lib/libdl-2.3.4.so) ==28750== by 0x918160: _dl_catch_error (in /lib/ld-2.3.4.so) ==28750== by 0xA6D21F: _dlerror_run (in /lib/libdl-2.3.4.so) ==28750== by 0xA6CD5C: dlclose (in /lib/libdl-2.3.4.so) ==28750== by 0x80DEC6B: load_resource (loader.c:412) ==28750== by 0x80DEF68: load_resource_list (loader.c:884) ==28750== by 0x80DF5AE: load_modules (loader.c:1047) ==28750== by 0x80793E8: main (asterisk.c:3656) ==28750== Address 0x40C1FD1 is 1 bytes inside a block of size 40 free'd ==28750== at 0x4004EFA: free (vg_replace_malloc.c:235) ==28750== by 0xA1562B: _dl_close (in /lib/tls/i486/libc-2.3.4.so) ==28750== by 0xA6CD2C: dlclose_doit (in /lib/libdl-2.3.4.so) ==28750== by 0x918160: _dl_catch_error (in /lib/ld-2.3.4.so) ==28750== by 0xA6D21F: _dlerror_run (in /lib/libdl-2.3.4.so) ==28750== by 0xA6CD5C: dlclose (in /lib/libdl-2.3.4.so) ==28750== by 0x80DEC6B: load_resource (loader.c:412) ==28750== by 0x80DEF68: load_resource_list (loader.c:884) ==28750== by 0x80DF5AE: load_modules (loader.c:1047) ==28750== by 0x80793E8: main (asterisk.c:3656) ==28750== ==28750== Invalid read of size 1 ==28750== at 0x91DBD8: memcpy (in /lib/ld-2.3.4.so) ==28750== by 0x917F4A: _dl_signal_error (in /lib/ld-2.3.4.so) ==28750== by 0xA158E8: _dl_close (in /lib/tls/i486/libc-2.3.4.so) ==28750== by 0xA6CD2C: dlclose_doit (in /lib/libdl-2.3.4.so) ==28750== by 0x918160: _dl_catch_error (in /lib/ld-2.3.4.so) ==28750== by 0xA6D21F: _dlerror_run (in /lib/libdl-2.3.4.so) ==28750== by 0xA6CD5C: dlclose (in /lib/libdl-2.3.4.so) ==28750== by 0x80DEC6B: load_resource (loader.c:412) ==28750== by 0x80DEF68: load_resource_list (loader.c:884) ==28750== by 0x80DF5AE: load_modules (loader.c:1047) ==28750== by 0x80793E8: main (asterisk.c:3656) ==28750== Address 0x40C1FF5 is 37 bytes inside a block of size 40 free'd ==28750== at 0x4004EFA: free (vg_replace_malloc.c:235) ==28750== by 0xA1562B: _dl_close (in /lib/tls/i486/libc-2.3.4.so) ==28750== by 0xA6CD2C: dlclose_doit (in /lib/libdl-2.3.4.so) ==28750== by 0x918160: _dl_catch_error (in /lib/ld-2.3.4.so) ==28750== by 0xA6D21F: _dlerror_run (in /lib/libdl-2.3.4.so) ==28750== by 0xA6CD5C: dlclose (in /lib/libdl-2.3.4.so) ==28750== by 0x80DEC6B: load_resource (loader.c:412) ==28750== by 0x80DEF68: load_resource_list (loader.c:884) ==28750== by 0x80DF5AE: load_modules (loader.c:1047) ==28750== by 0x80793E8: main (asterisk.c:3656) ==28750== ==28750== Invalid read of size 2 ==28750== at 0x80BA923: ast_event_new (event.c:785) ==28750== by 0x80BAD58: ast_event_get_cached (event.c:1013) ==28750== by 0x80ACFDD: _ast_device_state (devicestate.c:293) ==28750== by 0x80F6899: ast_extension_state2 (pbx.c:3791) ==28750== by 0x80F6DB8: ast_add_hint_nolock (pbx.c:4031) ==28750== by 0x8101A7B: ast_add_extension2_lockopt (pbx.c:4043) ==28750== by 0x42D2BA2: pbx_load_module (pbx_config.c:1518) ==28750== by 0x42D3856: load_module (pbx_config.c:1726) ==28750== by 0x80DE4E0: start_resource (loader.c:727) ==28750== by 0x80DEFB3: load_resource_list (loader.c:905) ==28750== by 0x80DF5C5: load_modules (loader.c:1052) ==28750== by 0x80793E8: main (asterisk.c:3656) ==28750== Address 0x40AF094 is 0 bytes after a block of size 4 alloc'd ==28750== at 0x40056BF: calloc (vg_replace_malloc.c:279) ==28750== by 0x80BA874: ast_event_new (utils.h:457) ==28750== by 0x80BAD58: ast_event_get_cached (event.c:1013) ==28750== by 0x80ACFDD: _ast_device_state (devicestate.c:293) ==28750== by 0x80F6899: ast_extension_state2 (pbx.c:3791) ==28750== by 0x80F6DB8: ast_add_hint_nolock (pbx.c:4031) ==28750== by 0x8101A7B: ast_add_extension2_lockopt (pbx.c:4043) ==28750== by 0x42D2BA2: pbx_load_module (pbx_config.c:1518) ==28750== by 0x42D3856: load_module (pbx_config.c:1726) ==28750== by 0x80DE4E0: start_resource (loader.c:727) ==28750== by 0x80DEFB3: load_resource_list (loader.c:905) ==28750== by 0x80DF5C5: load_modules (loader.c:1052) ==28750== ==28750== Invalid read of size 2 ==28750== at 0x80BA934: ast_event_new (event.c:779) ==28750== by 0x80BAD58: ast_event_get_cached (event.c:1013) ==28750== by 0x80ACFDD: _ast_device_state (devicestate.c:293) ==28750== by 0x80F6899: ast_extension_state2 (pbx.c:3791) ==28750== by 0x80F6DB8: ast_add_hint_nolock (pbx.c:4031) ==28750== by 0x8101A7B: ast_add_extension2_lockopt (pbx.c:4043) ==28750== by 0x42D2BA2: pbx_load_module (pbx_config.c:1518) ==28750== by 0x42D3856: load_module (pbx_config.c:1726) ==28750== by 0x80DE4E0: start_resource (loader.c:727) ==28750== by 0x80DEFB3: load_resource_list (loader.c:905) ==28750== by 0x80DF5C5: load_modules (loader.c:1052) ==28750== by 0x80793E8: main (asterisk.c:3656) ==28750== Address 0x40AF096 is 2 bytes after a block of size 4 alloc'd ==28750== at 0x40056BF: calloc (vg_replace_malloc.c:279) ==28750== by 0x80BA874: ast_event_new (utils.h:457) ==28750== by 0x80BAD58: ast_event_get_cached (event.c:1013) ==28750== by 0x80ACFDD: _ast_device_state (devicestate.c:293) ==28750== by 0x80F6899: ast_extension_state2 (pbx.c:3791) ==28750== by 0x80F6DB8: ast_add_hint_nolock (pbx.c:4031) ==28750== by 0x8101A7B: ast_add_extension2_lockopt (pbx.c:4043) ==28750== by 0x42D2BA2: pbx_load_module (pbx_config.c:1518) ==28750== by 0x42D3856: load_module (pbx_config.c:1726) ==28750== by 0x80DE4E0: start_resource (loader.c:727) ==28750== by 0x80DEFB3: load_resource_list (loader.c:905) ==28750== by 0x80DF5C5: load_modules (loader.c:1052) ==28750== ==28750== Source and destination overlap in memcpy(0xBEF9D2D0, 0xBEF9D370, 428) ==28750== at 0x4006236: memcpy (mac_replace_strmem.c:394) ==28750== by 0x455471A: Decode (iLBC_decode.c:254) ==28750== by 0x4555724: iLBC_decode (iLBC_decode.c:508) ==28750== by 0x4553EF5: ilbctolin_framein (codec_ilbc.c:108) ==28750== by 0x8141D04: framein (translate.c:194) ==28750== by 0x81428AB: calc_cost (translate.c:421) ==28750== by 0x8143404: __ast_register_translator (translate.c:681) ==28750== by 0x45541E3: load_module (codec_ilbc.c:200) ==28750== by 0x80DE4E0: start_resource (loader.c:727) ==28750== by 0x80DEFB3: load_resource_list (loader.c:905) ==28750== by 0x80DF5C5: load_modules (loader.c:1052) ==28750== by 0x80793E8: main (asterisk.c:3656) ==28750== ==28750== Source and destination overlap in memcpy(0xBEF9D2D0, 0xBEF9D370, 428) ==28750== at 0x4006236: memcpy (mac_replace_strmem.c:394) ==28750== by 0x45548C8: Decode (iLBC_decode.c:302) ==28750== by 0x4555724: iLBC_decode (iLBC_decode.c:508) ==28750== by 0x4553EF5: ilbctolin_framein (codec_ilbc.c:108) ==28750== by 0x8141D04: framein (translate.c:194) ==28750== by 0x81428AB: calc_cost (translate.c:421) ==28750== by 0x8143404: __ast_register_translator (translate.c:681) ==28750== by 0x45541E3: load_module (codec_ilbc.c:200) ==28750== by 0x80DE4E0: start_resource (loader.c:727) ==28750== by 0x80DEFB3: load_resource_list (loader.c:905) ==28750== by 0x80DF5C5: load_modules (loader.c:1052) ==28750== by 0x80793E8: main (asterisk.c:3656) ==28750== ==28750== Source and destination overlap in memcpy(0xBEF9DB70, 0xBEF9DC10, 428) ==28750== at 0x4006236: memcpy (mac_replace_strmem.c:394) ==28750== by 0x4556199: iLBC_encode (iLBC_encode.c:311) ==28750== by 0x45540F3: lintoilbc_frameout (codec_ilbc.c:148) ==28750== by 0x81428E1: calc_cost (translate.c:425) ==28750== by 0x8143404: __ast_register_translator (translate.c:681) ==28750== by 0x4554203: load_module (codec_ilbc.c:202) ==28750== by 0x80DE4E0: start_resource (loader.c:727) ==28750== by 0x80DEFB3: load_resource_list (loader.c:905) ==28750== by 0x80DF5C5: load_modules (loader.c:1052) ==28750== by 0x80793E8: main (asterisk.c:3656) ==28750== ==28750== Invalid read of size 2 ==28750== at 0x80BA923: ast_event_new (event.c:785) ==28750== by 0x80BAD58: ast_event_get_cached (event.c:1013) ==28750== by 0x430B3E4: sip_send_mwi_to_peer (strings.h:64) ==28750== by 0x430F383: build_peer (chan_sip.c:23454) ==28750== by 0x4351FDB: reload_config (chan_sip.c:24245) ==28750== by 0x4358E13: load_module (chan_sip.c:24967) ==28750== by 0x80DE4E0: start_resource (loader.c:727) ==28750== by 0x80DEFB3: load_resource_list (loader.c:905) ==28750== by 0x80DF5C5: load_modules (loader.c:1052) ==28750== by 0x80793E8: main (asterisk.c:3656) ==28750== Address 0x48FFF94 is 0 bytes after a block of size 4 alloc'd ==28750== at 0x40056BF: calloc (vg_replace_malloc.c:279) ==28750== by 0x80BA874: ast_event_new (utils.h:457) ==28750== by 0x80BAD58: ast_event_get_cached (event.c:1013) ==28750== by 0x430B3E4: sip_send_mwi_to_peer (strings.h:64) ==28750== by 0x430F383: build_peer (chan_sip.c:23454) ==28750== by 0x4351FDB: reload_config (chan_sip.c:24245) ==28750== by 0x4358E13: load_module (chan_sip.c:24967) ==28750== by 0x80DE4E0: start_resource (loader.c:727) ==28750== by 0x80DEFB3: load_resource_list (loader.c:905) ==28750== by 0x80DF5C5: load_modules (loader.c:1052) ==28750== by 0x80793E8: main (asterisk.c:3656) ==28750== ==28750== Invalid read of size 2 ==28750== at 0x80BA934: ast_event_new (event.c:779) ==28750== by 0x80BAD58: ast_event_get_cached (event.c:1013) ==28750== by 0x430B3E4: sip_send_mwi_to_peer (strings.h:64) ==28750== by 0x430F383: build_peer (chan_sip.c:23454) ==28750== by 0x4351FDB: reload_config (chan_sip.c:24245) ==28750== by 0x4358E13: load_module (chan_sip.c:24967) ==28750== by 0x80DE4E0: start_resource (loader.c:727) ==28750== by 0x80DEFB3: load_resource_list (loader.c:905) ==28750== by 0x80DF5C5: load_modules (loader.c:1052) ==28750== by 0x80793E8: main (asterisk.c:3656) ==28750== Address 0x48FFF96 is 2 bytes after a block of size 4 alloc'd ==28750== at 0x40056BF: calloc (vg_replace_malloc.c:279) ==28750== by 0x80BA874: ast_event_new (utils.h:457) ==28750== by 0x80BAD58: ast_event_get_cached (event.c:1013) ==28750== by 0x430B3E4: sip_send_mwi_to_peer (strings.h:64) ==28750== by 0x430F383: build_peer (chan_sip.c:23454) ==28750== by 0x4351FDB: reload_config (chan_sip.c:24245) ==28750== by 0x4358E13: load_module (chan_sip.c:24967) ==28750== by 0x80DE4E0: start_resource (loader.c:727) ==28750== by 0x80DEFB3: load_resource_list (loader.c:905) ==28750== by 0x80DF5C5: load_modules (loader.c:1052) ==28750== by 0x80793E8: main (asterisk.c:3656) ==28750== ==28750== Thread 10: ==28750== Invalid read of size 2 ==28750== at 0x80BA923: ast_event_new (event.c:785) ==28750== by 0x80BAD58: ast_event_get_cached (event.c:1013) ==28750== by 0x80ACFDD: _ast_device_state (devicestate.c:293) ==28750== by 0x4315983: transmit_state_notify (chan_sip.c:10580) ==28750== by 0x433F59D: handle_request_subscribe (chan_sip.c:20827) ==28750== by 0x4348FF4: handle_incoming (chan_sip.c:21095) ==28750== by 0x434A858: handle_request_do (chan_sip.c:21382) ==28750== by 0x434B83B: sipsock_read (chan_sip.c:21276) ==28750== by 0x80DBE9D: ast_io_wait (io.c:288) ==28750== by 0x4358775: do_monitor (chan_sip.c:21782) ==28750== by 0x8148EC4: dummy_start (utils.c:968) ==28750== by 0xAF5143: start_thread (in /lib/tls/i486/libpthread-2.3.4.so) ==28750== Address 0x4C98924 is 0 bytes after a block of size 4 alloc'd ==28750== at 0x40056BF: calloc (vg_replace_malloc.c:279) ==28750== by 0x80BA874: ast_event_new (utils.h:457) ==28750== by 0x80BAD58: ast_event_get_cached (event.c:1013) ==28750== by 0x80ACFDD: _ast_device_state (devicestate.c:293) ==28750== by 0x4315983: transmit_state_notify (chan_sip.c:10580) ==28750== by 0x433F59D: handle_request_subscribe (chan_sip.c:20827) ==28750== by 0x4348FF4: handle_incoming (chan_sip.c:21095) ==28750== by 0x434A858: handle_request_do (chan_sip.c:21382) ==28750== by 0x434B83B: sipsock_read (chan_sip.c:21276) ==28750== by 0x80DBE9D: ast_io_wait (io.c:288) ==28750== by 0x4358775: do_monitor (chan_sip.c:21782) ==28750== by 0x8148EC4: dummy_start (utils.c:968) ==28750== ==28750== Invalid read of size 2 ==28750== at 0x80BA934: ast_event_new (event.c:779) ==28750== by 0x80BAD58: ast_event_get_cached (event.c:1013) ==28750== by 0x80ACFDD: _ast_device_state (devicestate.c:293) ==28750== by 0x4315983: transmit_state_notify (chan_sip.c:10580) ==28750== by 0x433F59D: handle_request_subscribe (chan_sip.c:20827) ==28750== by 0x4348FF4: handle_incoming (chan_sip.c:21095) ==28750== by 0x434A858: handle_request_do (chan_sip.c:21382) ==28750== by 0x434B83B: sipsock_read (chan_sip.c:21276) ==28750== by 0x80DBE9D: ast_io_wait (io.c:288) ==28750== by 0x4358775: do_monitor (chan_sip.c:21782) ==28750== by 0x8148EC4: dummy_start (utils.c:968) ==28750== by 0xAF5143: start_thread (in /lib/tls/i486/libpthread-2.3.4.so) ==28750== Address 0x4C98926 is 2 bytes after a block of size 4 alloc'd ==28750== at 0x40056BF: calloc (vg_replace_malloc.c:279) ==28750== by 0x80BA874: ast_event_new (utils.h:457) ==28750== by 0x80BAD58: ast_event_get_cached (event.c:1013) ==28750== by 0x80ACFDD: _ast_device_state (devicestate.c:293) ==28750== by 0x4315983: transmit_state_notify (chan_sip.c:10580) ==28750== by 0x433F59D: handle_request_subscribe (chan_sip.c:20827) ==28750== by 0x4348FF4: handle_incoming (chan_sip.c:21095) ==28750== by 0x434A858: handle_request_do (chan_sip.c:21382) ==28750== by 0x434B83B: sipsock_read (chan_sip.c:21276) ==28750== by 0x80DBE9D: ast_io_wait (io.c:288) ==28750== by 0x4358775: do_monitor (chan_sip.c:21782) ==28750== by 0x8148EC4: dummy_start (utils.c:968) ==28750== ==28750== Invalid read of size 2 ==28750== at 0x80BA923: ast_event_new (event.c:785) ==28750== by 0x80BAD58: ast_event_get_cached (event.c:1013) ==28750== by 0x430B3E4: sip_send_mwi_to_peer (strings.h:64) ==28750== by 0x433F98A: handle_request_subscribe (chan_sip.c:20812) ==28750== by 0x4348FF4: handle_incoming (chan_sip.c:21095) ==28750== by 0x434A858: handle_request_do (chan_sip.c:21382) ==28750== by 0x434B83B: sipsock_read (chan_sip.c:21276) ==28750== by 0x80DBE9D: ast_io_wait (io.c:288) ==28750== by 0x4358775: do_monitor (chan_sip.c:21782) ==28750== by 0x8148EC4: dummy_start (utils.c:968) ==28750== by 0xAF5143: start_thread (in /lib/tls/i486/libpthread-2.3.4.so) ==28750== by 0x9E5F7D: clone (in /lib/tls/i486/libc-2.3.4.so) ==28750== Address 0x4D90C74 is 0 bytes after a block of size 4 alloc'd ==28750== at 0x40056BF: calloc (vg_replace_malloc.c:279) ==28750== by 0x80BA874: ast_event_new (utils.h:457) ==28750== by 0x80BAD58: ast_event_get_cached (event.c:1013) ==28750== by 0x430B3E4: sip_send_mwi_to_peer (strings.h:64) ==28750== by 0x433F98A: handle_request_subscribe (chan_sip.c:20812) ==28750== by 0x4348FF4: handle_incoming (chan_sip.c:21095) ==28750== by 0x434A858: handle_request_do (chan_sip.c:21382) ==28750== by 0x434B83B: sipsock_read (chan_sip.c:21276) ==28750== by 0x80DBE9D: ast_io_wait (io.c:288) ==28750== by 0x4358775: do_monitor (chan_sip.c:21782) ==28750== by 0x8148EC4: dummy_start (utils.c:968) ==28750== by 0xAF5143: start_thread (in /lib/tls/i486/libpthread-2.3.4.so) ==28750== ==28750== Invalid read of size 2 ==28750== at 0x80BA934: ast_event_new (event.c:779) ==28750== by 0x80BAD58: ast_event_get_cached (event.c:1013) ==28750== by 0x430B3E4: sip_send_mwi_to_peer (strings.h:64) ==28750== by 0x433F98A: handle_request_subscribe (chan_sip.c:20812) ==28750== by 0x4348FF4: handle_incoming (chan_sip.c:21095) ==28750== by 0x434A858: handle_request_do (chan_sip.c:21382) ==28750== by 0x434B83B: sipsock_read (chan_sip.c:21276) ==28750== by 0x80DBE9D: ast_io_wait (io.c:288) ==28750== by 0x4358775: do_monitor (chan_sip.c:21782) ==28750== by 0x8148EC4: dummy_start (utils.c:968) ==28750== by 0xAF5143: start_thread (in /lib/tls/i486/libpthread-2.3.4.so) ==28750== by 0x9E5F7D: clone (in /lib/tls/i486/libc-2.3.4.so) ==28750== Address 0x4D90C76 is 2 bytes after a block of size 4 alloc'd ==28750== at 0x40056BF: calloc (vg_replace_malloc.c:279) ==28750== by 0x80BA874: ast_event_new (utils.h:457) ==28750== by 0x80BAD58: ast_event_get_cached (event.c:1013) ==28750== by 0x430B3E4: sip_send_mwi_to_peer (strings.h:64) ==28750== by 0x433F98A: handle_request_subscribe (chan_sip.c:20812) ==28750== by 0x4348FF4: handle_incoming (chan_sip.c:21095) ==28750== by 0x434A858: handle_request_do (chan_sip.c:21382) ==28750== by 0x434B83B: sipsock_read (chan_sip.c:21276) ==28750== by 0x80DBE9D: ast_io_wait (io.c:288) ==28750== by 0x4358775: do_monitor (chan_sip.c:21782) ==28750== by 0x8148EC4: dummy_start (utils.c:968) ==28750== by 0xAF5143: start_thread (in /lib/tls/i486/libpthread-2.3.4.so) ==28750== ==28750== Invalid read of size 4 ==28750== at 0x42F1837: initreqprep (chan_sip.c:8656) ==28750== by 0x430A59F: transmit_notify_with_mwi (chan_sip.c:10740) ==28750== by 0x430B32E: sip_send_mwi_to_peer (chan_sip.c:21647) ==28750== by 0x433F98A: handle_request_subscribe (chan_sip.c:20812) ==28750== by 0x4348FF4: handle_incoming (chan_sip.c:21095) ==28750== by 0x434A858: handle_request_do (chan_sip.c:21382) ==28750== by 0x434B83B: sipsock_read (chan_sip.c:21276) ==28750== by 0x80DBE9D: ast_io_wait (io.c:288) ==28750== by 0x4358775: do_monitor (chan_sip.c:21782) ==28750== by 0x8148EC4: dummy_start (utils.c:968) ==28750== by 0xAF5143: start_thread (in /lib/tls/i486/libpthread-2.3.4.so) ==28750== by 0x9E5F7D: clone (in /lib/tls/i486/libc-2.3.4.so) ==28750== Address 0x4D8D854 is 28 bytes inside a block of size 31 alloc'd ==28750== at 0x4004405: malloc (vg_replace_malloc.c:149) ==28750== by 0x42F40A0: build_route (utils.h:434) ==28750== by 0x433EE89: handle_request_subscribe (chan_sip.c:20608) ==28750== by 0x4348FF4: handle_incoming (chan_sip.c:21095) ==28750== by 0x434A858: handle_request_do (chan_sip.c:21382) ==28750== by 0x434B83B: sipsock_read (chan_sip.c:21276) ==28750== by 0x80DBE9D: ast_io_wait (io.c:288) ==28750== by 0x4358775: do_monitor (chan_sip.c:21782) ==28750== by 0x8148EC4: dummy_start (utils.c:968) ==28750== by 0xAF5143: start_thread (in /lib/tls/i486/libpthread-2.3.4.so) ==28750== by 0x9E5F7D: clone (in /lib/tls/i486/libc-2.3.4.so)