==5004== Memcheck, a memory error detector ==5004== Copyright (C) 2002-2009, and GNU GPL'd, by Julian Seward et al. ==5004== Using Valgrind-3.5.0 and LibVEX; rerun with -h for copyright info ==5004== Command: /usr/sbin/asterisk -f -vvvg -c ==5004== Parent PID: 4140 ==5004== ==5004== Invalid read of size 4 ==5004== at 0x61418D: _dl_close (in /lib/tls/libc-2.3.4.so) ==5004== by 0x644D59: dlclose_doit (in /lib/libdl-2.3.4.so) ==5004== by 0x50566D: _dl_catch_error (in /lib/ld-2.3.4.so) ==5004== by 0x6452BA: _dlerror_run (in /lib/libdl-2.3.4.so) ==5004== by 0x644D89: dlclose (in /lib/libdl-2.3.4.so) ==5004== by 0x80BE47E: load_dynamic_module (loader.c:394) ==5004== by 0x80BF707: load_resource (loader.c:718) ==5004== by 0x80C00D9: load_modules (loader.c:946) ==5004== by 0x807163D: main (asterisk.c:3163) ==5004== Address 0x403f8b8 is 24 bytes inside a block of size 633 free'd ==5004== at 0x4005625: free (vg_replace_malloc.c:325) ==5004== by 0x6146B0: _dl_close (in /lib/tls/libc-2.3.4.so) ==5004== by 0x644D59: dlclose_doit (in /lib/libdl-2.3.4.so) ==5004== by 0x50566D: _dl_catch_error (in /lib/ld-2.3.4.so) ==5004== by 0x6452BA: _dlerror_run (in /lib/libdl-2.3.4.so) ==5004== by 0x644D89: dlclose (in /lib/libdl-2.3.4.so) ==5004== by 0x80BE47E: load_dynamic_module (loader.c:394) ==5004== by 0x80BF707: load_resource (loader.c:718) ==5004== by 0x80C00D9: load_modules (loader.c:946) ==5004== by 0x807163D: main (asterisk.c:3163) ==5004== ==5004== Invalid read of size 1 ==5004== at 0x614190: _dl_close (in /lib/tls/libc-2.3.4.so) ==5004== by 0x644D59: dlclose_doit (in /lib/libdl-2.3.4.so) ==5004== by 0x50566D: _dl_catch_error (in /lib/ld-2.3.4.so) ==5004== by 0x6452BA: _dlerror_run (in /lib/libdl-2.3.4.so) ==5004== by 0x644D89: dlclose (in /lib/libdl-2.3.4.so) ==5004== by 0x80BE47E: load_dynamic_module (loader.c:394) ==5004== by 0x80BF707: load_resource (loader.c:718) ==5004== by 0x80C00D9: load_modules (loader.c:946) ==5004== by 0x807163D: main (asterisk.c:3163) ==5004== Address 0x403fa98 is 504 bytes inside a block of size 633 free'd ==5004== at 0x4005625: free (vg_replace_malloc.c:325) ==5004== by 0x6146B0: _dl_close (in /lib/tls/libc-2.3.4.so) ==5004== by 0x644D59: dlclose_doit (in /lib/libdl-2.3.4.so) ==5004== by 0x50566D: _dl_catch_error (in /lib/ld-2.3.4.so) ==5004== by 0x6452BA: _dlerror_run (in /lib/libdl-2.3.4.so) ==5004== by 0x644D89: dlclose (in /lib/libdl-2.3.4.so) ==5004== by 0x80BE47E: load_dynamic_module (loader.c:394) ==5004== by 0x80BF707: load_resource (loader.c:718) ==5004== by 0x80C00D9: load_modules (loader.c:946) ==5004== by 0x807163D: main (asterisk.c:3163) ==5004== ==5004== Invalid read of size 4 ==5004== at 0x6141A3: _dl_close (in /lib/tls/libc-2.3.4.so) ==5004== by 0x644D59: dlclose_doit (in /lib/libdl-2.3.4.so) ==5004== by 0x50566D: _dl_catch_error (in /lib/ld-2.3.4.so) ==5004== by 0x6452BA: _dlerror_run (in /lib/libdl-2.3.4.so) ==5004== by 0x644D89: dlclose (in /lib/libdl-2.3.4.so) ==5004== by 0x80BE47E: load_dynamic_module (loader.c:394) ==5004== by 0x80BF707: load_resource (loader.c:718) ==5004== by 0x80C00D9: load_modules (loader.c:946) ==5004== by 0x807163D: main (asterisk.c:3163) ==5004== Address 0x403fa1c is 380 bytes inside a block of size 633 free'd ==5004== at 0x4005625: free (vg_replace_malloc.c:325) ==5004== by 0x6146B0: _dl_close (in /lib/tls/libc-2.3.4.so) ==5004== by 0x644D59: dlclose_doit (in /lib/libdl-2.3.4.so) ==5004== by 0x50566D: _dl_catch_error (in /lib/ld-2.3.4.so) ==5004== by 0x6452BA: _dlerror_run (in /lib/libdl-2.3.4.so) ==5004== by 0x644D89: dlclose (in /lib/libdl-2.3.4.so) ==5004== by 0x80BE47E: load_dynamic_module (loader.c:394) ==5004== by 0x80BF707: load_resource (loader.c:718) ==5004== by 0x80C00D9: load_modules (loader.c:946) ==5004== by 0x807163D: main (asterisk.c:3163) ==5004== ==5004== Invalid read of size 4 ==5004== at 0x6148CF: _dl_close (in /lib/tls/libc-2.3.4.so) ==5004== by 0x644D59: dlclose_doit (in /lib/libdl-2.3.4.so) ==5004== by 0x50566D: _dl_catch_error (in /lib/ld-2.3.4.so) ==5004== by 0x6452BA: _dlerror_run (in /lib/libdl-2.3.4.so) ==5004== by 0x644D89: dlclose (in /lib/libdl-2.3.4.so) ==5004== by 0x80BE47E: load_dynamic_module (loader.c:394) ==5004== by 0x80BF707: load_resource (loader.c:718) ==5004== by 0x80C00D9: load_modules (loader.c:946) ==5004== by 0x807163D: main (asterisk.c:3163) ==5004== Address 0x403f8a4 is 4 bytes inside a block of size 633 free'd ==5004== at 0x4005625: free (vg_replace_malloc.c:325) ==5004== by 0x6146B0: _dl_close (in /lib/tls/libc-2.3.4.so) ==5004== by 0x644D59: dlclose_doit (in /lib/libdl-2.3.4.so) ==5004== by 0x50566D: _dl_catch_error (in /lib/ld-2.3.4.so) ==5004== by 0x6452BA: _dlerror_run (in /lib/libdl-2.3.4.so) ==5004== by 0x644D89: dlclose (in /lib/libdl-2.3.4.so) ==5004== by 0x80BE47E: load_dynamic_module (loader.c:394) ==5004== by 0x80BF707: load_resource (loader.c:718) ==5004== by 0x80C00D9: load_modules (loader.c:946) ==5004== by 0x807163D: main (asterisk.c:3163) ==5004== ==5004== Invalid read of size 1 ==5004== at 0x40067B8: strlen (mc_replace_strmem.c:277) ==5004== by 0x5053E7: _dl_signal_error (in /lib/ld-2.3.4.so) ==5004== by 0x6148E2: _dl_close (in /lib/tls/libc-2.3.4.so) ==5004== by 0x644D59: dlclose_doit (in /lib/libdl-2.3.4.so) ==5004== by 0x50566D: _dl_catch_error (in /lib/ld-2.3.4.so) ==5004== by 0x6452BA: _dlerror_run (in /lib/libdl-2.3.4.so) ==5004== by 0x644D89: dlclose (in /lib/libdl-2.3.4.so) ==5004== by 0x80BE47E: load_dynamic_module (loader.c:394) ==5004== by 0x80BF707: load_resource (loader.c:718) ==5004== by 0x80C00D9: load_modules (loader.c:946) ==5004== by 0x807163D: main (asterisk.c:3163) ==5004== Address 0x403f840 is 0 bytes inside a block of size 45 free'd ==5004== at 0x4005625: free (vg_replace_malloc.c:325) ==5004== by 0x614628: _dl_close (in /lib/tls/libc-2.3.4.so) ==5004== by 0x644D59: dlclose_doit (in /lib/libdl-2.3.4.so) ==5004== by 0x50566D: _dl_catch_error (in /lib/ld-2.3.4.so) ==5004== by 0x6452BA: _dlerror_run (in /lib/libdl-2.3.4.so) ==5004== by 0x644D89: dlclose (in /lib/libdl-2.3.4.so) ==5004== by 0x80BE47E: load_dynamic_module (loader.c:394) ==5004== by 0x80BF707: load_resource (loader.c:718) ==5004== by 0x80C00D9: load_modules (loader.c:946) ==5004== by 0x807163D: main (asterisk.c:3163) ==5004== ==5004== Invalid read of size 1 ==5004== at 0x40067C1: strlen (mc_replace_strmem.c:277) ==5004== by 0x5053E7: _dl_signal_error (in /lib/ld-2.3.4.so) ==5004== by 0x6148E2: _dl_close (in /lib/tls/libc-2.3.4.so) ==5004== by 0x644D59: dlclose_doit (in /lib/libdl-2.3.4.so) ==5004== by 0x50566D: _dl_catch_error (in /lib/ld-2.3.4.so) ==5004== by 0x6452BA: _dlerror_run (in /lib/libdl-2.3.4.so) ==5004== by 0x644D89: dlclose (in /lib/libdl-2.3.4.so) ==5004== by 0x80BE47E: load_dynamic_module (loader.c:394) ==5004== by 0x80BF707: load_resource (loader.c:718) ==5004== by 0x80C00D9: load_modules (loader.c:946) ==5004== by 0x807163D: main (asterisk.c:3163) ==5004== Address 0x403f841 is 1 bytes inside a block of size 45 free'd ==5004== at 0x4005625: free (vg_replace_malloc.c:325) ==5004== by 0x614628: _dl_close (in /lib/tls/libc-2.3.4.so) ==5004== by 0x644D59: dlclose_doit (in /lib/libdl-2.3.4.so) ==5004== by 0x50566D: _dl_catch_error (in /lib/ld-2.3.4.so) ==5004== by 0x6452BA: _dlerror_run (in /lib/libdl-2.3.4.so) ==5004== by 0x644D89: dlclose (in /lib/libdl-2.3.4.so) ==5004== by 0x80BE47E: load_dynamic_module (loader.c:394) ==5004== by 0x80BF707: load_resource (loader.c:718) ==5004== by 0x80C00D9: load_modules (loader.c:946) ==5004== by 0x807163D: main (asterisk.c:3163) ==5004== ==5004== Invalid read of size 1 ==5004== at 0x50BC05: memcpy (in /lib/ld-2.3.4.so) ==5004== by 0x6148E2: _dl_close (in /lib/tls/libc-2.3.4.so) ==5004== by 0x644D59: dlclose_doit (in /lib/libdl-2.3.4.so) ==5004== by 0x50566D: _dl_catch_error (in /lib/ld-2.3.4.so) ==5004== by 0x6452BA: _dlerror_run (in /lib/libdl-2.3.4.so) ==5004== by 0x644D89: dlclose (in /lib/libdl-2.3.4.so) ==5004== by 0x80BE47E: load_dynamic_module (loader.c:394) ==5004== by 0x80BF707: load_resource (loader.c:718) ==5004== by 0x80C00D9: load_modules (loader.c:946) ==5004== by 0x807163D: main (asterisk.c:3163) ==5004== Address 0x403f840 is 0 bytes inside a block of size 45 free'd ==5004== at 0x4005625: free (vg_replace_malloc.c:325) ==5004== by 0x614628: _dl_close (in /lib/tls/libc-2.3.4.so) ==5004== by 0x644D59: dlclose_doit (in /lib/libdl-2.3.4.so) ==5004== by 0x50566D: _dl_catch_error (in /lib/ld-2.3.4.so) ==5004== by 0x6452BA: _dlerror_run (in /lib/libdl-2.3.4.so) ==5004== by 0x644D89: dlclose (in /lib/libdl-2.3.4.so) ==5004== by 0x80BE47E: load_dynamic_module (loader.c:394) ==5004== by 0x80BF707: load_resource (loader.c:718) ==5004== by 0x80C00D9: load_modules (loader.c:946) ==5004== by 0x807163D: main (asterisk.c:3163) ==5004== ==5004== Invalid read of size 4 ==5004== at 0x50BC0C: memcpy (in /lib/ld-2.3.4.so) ==5004== by 0x6148E2: _dl_close (in /lib/tls/libc-2.3.4.so) ==5004== by 0x644D59: dlclose_doit (in /lib/libdl-2.3.4.so) ==5004== by 0x50566D: _dl_catch_error (in /lib/ld-2.3.4.so) ==5004== by 0x6452BA: _dlerror_run (in /lib/libdl-2.3.4.so) ==5004== by 0x644D89: dlclose (in /lib/libdl-2.3.4.so) ==5004== by 0x80BE47E: load_dynamic_module (loader.c:394) ==5004== by 0x80BF707: load_resource (loader.c:718) ==5004== by 0x80C00D9: load_modules (loader.c:946) ==5004== by 0x807163D: main (asterisk.c:3163) ==5004== Address 0x403f841 is 1 bytes inside a block of size 45 free'd ==5004== at 0x4005625: free (vg_replace_malloc.c:325) ==5004== by 0x614628: _dl_close (in /lib/tls/libc-2.3.4.so) ==5004== by 0x644D59: dlclose_doit (in /lib/libdl-2.3.4.so) ==5004== by 0x50566D: _dl_catch_error (in /lib/ld-2.3.4.so) ==5004== by 0x6452BA: _dlerror_run (in /lib/libdl-2.3.4.so) ==5004== by 0x644D89: dlclose (in /lib/libdl-2.3.4.so) ==5004== by 0x80BE47E: load_dynamic_module (loader.c:394) ==5004== by 0x80BF707: load_resource (loader.c:718) ==5004== by 0x80C00D9: load_modules (loader.c:946) ==5004== by 0x807163D: main (asterisk.c:3163) ==5004== ==5004== Invalid read of size 2 ==5004== at 0x50BC0A: memcpy (in /lib/ld-2.3.4.so) ==5004== by 0x6148E2: _dl_close (in /lib/tls/libc-2.3.4.so) ==5004== by 0x644D59: dlclose_doit (in /lib/libdl-2.3.4.so) ==5004== by 0x50566D: _dl_catch_error (in /lib/ld-2.3.4.so) ==5004== by 0x6452BA: _dlerror_run (in /lib/libdl-2.3.4.so) ==5004== by 0x644D89: dlclose (in /lib/libdl-2.3.4.so) ==5004== by 0x80BE47E: load_dynamic_module (loader.c:394) ==5004== by 0x80BF707: load_resource (loader.c:718) ==5004== by 0x80C00D9: load_modules (loader.c:946) ==5004== by 0x807163D: main (asterisk.c:3163) ==5004== Address 0x40404c8 is 0 bytes inside a block of size 38 free'd ==5004== at 0x4005625: free (vg_replace_malloc.c:325) ==5004== by 0x614628: _dl_close (in /lib/tls/libc-2.3.4.so) ==5004== by 0x644D59: dlclose_doit (in /lib/libdl-2.3.4.so) ==5004== by 0x50566D: _dl_catch_error (in /lib/ld-2.3.4.so) ==5004== by 0x6452BA: _dlerror_run (in /lib/libdl-2.3.4.so) ==5004== by 0x644D89: dlclose (in /lib/libdl-2.3.4.so) ==5004== by 0x80BE47E: load_dynamic_module (loader.c:394) ==5004== by 0x80BF707: load_resource (loader.c:718) ==5004== by 0x80C00D9: load_modules (loader.c:946) ==5004== by 0x807163D: main (asterisk.c:3163) ==5004== ==5004== Warning: invalid file descriptor -1 in syscall read() ==5004== Warning: invalid file descriptor -1 in syscall read() ==5004== Source and destination overlap in memcpy(0xbefe5470, 0xbefe5510, 428) ==5004== at 0x4006B69: memcpy (mc_replace_strmem.c:482) ==5004== by 0x56026B7: Decode (iLBC_decode.c:254) ==5004== by 0x56032C0: iLBC_decode (iLBC_decode.c:508) ==5004== by 0x5601C8E: ilbctolin_framein (codec_ilbc.c:147) ==5004== by 0x811076A: framein (translate.c:201) ==5004== by 0x81117FE: calc_cost (translate.c:427) ==5004== by 0x8112A43: __ast_register_translator (translate.c:741) ==5004== by 0x5601F3E: load_module (codec_ilbc.c:239) ==5004== by 0x80BF7E2: load_resource (loader.c:744) ==5004== by 0x80C01F1: load_modules (loader.c:965) ==5004== by 0x807163D: main (asterisk.c:3163) ==5004== ==5004== Source and destination overlap in memcpy(0xbefe5470, 0xbefe5510, 428) ==5004== at 0x4006B69: memcpy (mc_replace_strmem.c:482) ==5004== by 0x56028A9: Decode (iLBC_decode.c:302) ==5004== by 0x56032C0: iLBC_decode (iLBC_decode.c:508) ==5004== by 0x5601C8E: ilbctolin_framein (codec_ilbc.c:147) ==5004== by 0x811076A: framein (translate.c:201) ==5004== by 0x81117FE: calc_cost (translate.c:427) ==5004== by 0x8112A43: __ast_register_translator (translate.c:741) ==5004== by 0x5601F3E: load_module (codec_ilbc.c:239) ==5004== by 0x80BF7E2: load_resource (loader.c:744) ==5004== by 0x80C01F1: load_modules (loader.c:965) ==5004== by 0x807163D: main (asterisk.c:3163) ==5004== ==5004== Source and destination overlap in memcpy(0xbefe5c80, 0xbefe5d20, 428) ==5004== at 0x4006B69: memcpy (mc_replace_strmem.c:482) ==5004== by 0x560461F: iLBC_encode (iLBC_encode.c:311) ==5004== by 0x5601E48: lintoilbc_frameout (codec_ilbc.c:187) ==5004== by 0x811181F: calc_cost (translate.c:429) ==5004== by 0x8112A43: __ast_register_translator (translate.c:741) ==5004== by 0x5601F61: load_module (codec_ilbc.c:241) ==5004== by 0x80BF7E2: load_resource (loader.c:744) ==5004== by 0x80C01F1: load_modules (loader.c:965) ==5004== by 0x807163D: main (asterisk.c:3163) ==5004== ==5004== Source and destination overlap in memcpy(0xbefe5c80, 0xbefe5d20, 428) ==5004== at 0x4006B69: memcpy (mc_replace_strmem.c:482) ==5004== by 0x5604A47: iLBC_encode (iLBC_encode.c:389) ==5004== by 0x5601E48: lintoilbc_frameout (codec_ilbc.c:187) ==5004== by 0x811181F: calc_cost (translate.c:429) ==5004== by 0x8112A43: __ast_register_translator (translate.c:741) ==5004== by 0x5601F61: load_module (codec_ilbc.c:241) ==5004== by 0x80BF7E2: load_resource (loader.c:744) ==5004== by 0x80C01F1: load_modules (loader.c:965) ==5004== by 0x807163D: main (asterisk.c:3163) ==5004== ==5004== Thread 31: ==5004== Source and destination overlap in memcpy(0x577e050, 0x577e0f0, 428) ==5004== at 0x4006B69: memcpy (mc_replace_strmem.c:482) ==5004== by 0x560461F: iLBC_encode (iLBC_encode.c:311) ==5004== by 0x5601E48: lintoilbc_frameout (codec_ilbc.c:187) ==5004== by 0x81114C6: ast_translate (translate.c:357) ==5004== by 0x808C53A: ast_write (channel.c:2922) ==5004== by 0x45526DA: moh_files_generator (res_musiconhold.c:294) ==5004== by 0x8089835: ast_read_generator_actions (channel.c:1997) ==5004== by 0x808B005: __ast_read (channel.c:2476) ==5004== by 0x808B27C: ast_read (channel.c:2510) ==5004== by 0x540EFC3: wait_for_answer (app_queue.c:2389) ==5004== by 0x5410B80: try_calling (app_queue.c:2956) ==5004== by 0x54156CE: queue_exec (app_queue.c:4076) ==5004== ==5004== Source and destination overlap in memcpy(0x577e050, 0x577e0f0, 428) ==5004== at 0x4006B69: memcpy (mc_replace_strmem.c:482) ==5004== by 0x5604A47: iLBC_encode (iLBC_encode.c:389) ==5004== by 0x5601E48: lintoilbc_frameout (codec_ilbc.c:187) ==5004== by 0x81114C6: ast_translate (translate.c:357) ==5004== by 0x808C53A: ast_write (channel.c:2922) ==5004== by 0x45526DA: moh_files_generator (res_musiconhold.c:294) ==5004== by 0x8089835: ast_read_generator_actions (channel.c:1997) ==5004== by 0x808B005: __ast_read (channel.c:2476) ==5004== by 0x808B27C: ast_read (channel.c:2510) ==5004== by 0x540EFC3: wait_for_answer (app_queue.c:2389) ==5004== by 0x5410B80: try_calling (app_queue.c:2956) ==5004== by 0x54156CE: queue_exec (app_queue.c:4076) ==5004== ==5004== Thread 38: ==5004== Invalid read of size 1 ==5004== at 0x4006BEF: memcpy (mc_replace_strmem.c:482) ==5004== by 0x81091F4: ast_slinfactory_read (slinfactory.c:159) ==5004== by 0x8075905: audiohook_read_frame_both (audiohook.c:244) ==5004== by 0x8075DD9: ast_audiohook_read_frame (audiohook.c:310) ==5004== by 0x45D1857: mixmonitor_thread (app_mixmonitor.c:246) ==5004== by 0x8118AF9: dummy_start (utils.c:856) ==5004== by 0x6863CB: start_thread (in /lib/tls/libpthread-2.3.4.so) ==5004== by 0x5DEB4D: clone (in /lib/tls/libc-2.3.4.so) ==5004== Address 0x42e73e2 is 0 bytes after a block of size 618 alloc'd ==5004== at 0x4005EB7: calloc (vg_replace_malloc.c:418) ==5004== by 0x81171FA: _ast_calloc (utils.h:359) ==5004== by 0x80B1C1E: ast_frdup (frame.c:522) ==5004== by 0x8108F2F: ast_slinfactory_feed (slinfactory.c:99) ==5004== by 0x8075336: ast_audiohook_write_frame (audiohook.c:163) ==5004== by 0x80776D5: audio_audiohook_write_list (audiohook.c:614) ==5004== by 0x8077D97: ast_audiohook_write_list (audiohook.c:709) ==5004== by 0x808ADDD: __ast_read (channel.c:2423) ==5004== by 0x808B27C: ast_read (channel.c:2510) ==5004== by 0x540EFC3: wait_for_answer (app_queue.c:2389) ==5004== by 0x5410B80: try_calling (app_queue.c:2956) ==5004== by 0x54156CE: queue_exec (app_queue.c:4076) ==5004== ==5004== Invalid read of size 1 ==5004== at 0x4006BF6: memcpy (mc_replace_strmem.c:482) ==5004== by 0x81091F4: ast_slinfactory_read (slinfactory.c:159) ==5004== by 0x8075905: audiohook_read_frame_both (audiohook.c:244) ==5004== by 0x8075DD9: ast_audiohook_read_frame (audiohook.c:310) ==5004== by 0x45D1857: mixmonitor_thread (app_mixmonitor.c:246) ==5004== by 0x8118AF9: dummy_start (utils.c:856) ==5004== by 0x6863CB: start_thread (in /lib/tls/libpthread-2.3.4.so) ==5004== by 0x5DEB4D: clone (in /lib/tls/libc-2.3.4.so) ==5004== Address 0x42e73e3 is 1 bytes after a block of size 618 alloc'd ==5004== at 0x4005EB7: calloc (vg_replace_malloc.c:418) ==5004== by 0x81171FA: _ast_calloc (utils.h:359) ==5004== by 0x80B1C1E: ast_frdup (frame.c:522) ==5004== by 0x8108F2F: ast_slinfactory_feed (slinfactory.c:99) ==5004== by 0x8075336: ast_audiohook_write_frame (audiohook.c:163) ==5004== by 0x80776D5: audio_audiohook_write_list (audiohook.c:614) ==5004== by 0x8077D97: ast_audiohook_write_list (audiohook.c:709) ==5004== by 0x808ADDD: __ast_read (channel.c:2423) ==5004== by 0x808B27C: ast_read (channel.c:2510) ==5004== by 0x540EFC3: wait_for_answer (app_queue.c:2389) ==5004== by 0x5410B80: try_calling (app_queue.c:2956) ==5004== by 0x54156CE: queue_exec (app_queue.c:4076) ==5004== ==5004== Invalid read of size 1 ==5004== at 0x4006BE4: memcpy (mc_replace_strmem.c:482) ==5004== by 0x81091F4: ast_slinfactory_read (slinfactory.c:159) ==5004== by 0x8075905: audiohook_read_frame_both (audiohook.c:244) ==5004== by 0x8075DD9: ast_audiohook_read_frame (audiohook.c:310) ==5004== by 0x45D1857: mixmonitor_thread (app_mixmonitor.c:246) ==5004== by 0x8118AF9: dummy_start (utils.c:856) ==5004== by 0x6863CB: start_thread (in /lib/tls/libpthread-2.3.4.so) ==5004== by 0x5DEB4D: clone (in /lib/tls/libc-2.3.4.so) ==5004== Address 0x42e73e4 is 2 bytes after a block of size 618 alloc'd ==5004== at 0x4005EB7: calloc (vg_replace_malloc.c:418) ==5004== by 0x81171FA: _ast_calloc (utils.h:359) ==5004== by 0x80B1C1E: ast_frdup (frame.c:522) ==5004== by 0x8108F2F: ast_slinfactory_feed (slinfactory.c:99) ==5004== by 0x8075336: ast_audiohook_write_frame (audiohook.c:163) ==5004== by 0x80776D5: audio_audiohook_write_list (audiohook.c:614) ==5004== by 0x8077D97: ast_audiohook_write_list (audiohook.c:709) ==5004== by 0x808ADDD: __ast_read (channel.c:2423) ==5004== by 0x808B27C: ast_read (channel.c:2510) ==5004== by 0x540EFC3: wait_for_answer (app_queue.c:2389) ==5004== by 0x5410B80: try_calling (app_queue.c:2956) ==5004== by 0x54156CE: queue_exec (app_queue.c:4076) ==5004== ==5004== Invalid read of size 1 ==5004== at 0x4006BE9: memcpy (mc_replace_strmem.c:482) ==5004== by 0x81091F4: ast_slinfactory_read (slinfactory.c:159) ==5004== by 0x8075905: audiohook_read_frame_both (audiohook.c:244) ==5004== by 0x8075DD9: ast_audiohook_read_frame (audiohook.c:310) ==5004== by 0x45D1857: mixmonitor_thread (app_mixmonitor.c:246) ==5004== by 0x8118AF9: dummy_start (utils.c:856) ==5004== by 0x6863CB: start_thread (in /lib/tls/libpthread-2.3.4.so) ==5004== by 0x5DEB4D: clone (in /lib/tls/libc-2.3.4.so) ==5004== Address 0x42e73e5 is 3 bytes after a block of size 618 alloc'd ==5004== at 0x4005EB7: calloc (vg_replace_malloc.c:418) ==5004== by 0x81171FA: _ast_calloc (utils.h:359) ==5004== by 0x80B1C1E: ast_frdup (frame.c:522) ==5004== by 0x8108F2F: ast_slinfactory_feed (slinfactory.c:99) ==5004== by 0x8075336: ast_audiohook_write_frame (audiohook.c:163) ==5004== by 0x80776D5: audio_audiohook_write_list (audiohook.c:614) ==5004== by 0x8077D97: ast_audiohook_write_list (audiohook.c:709) ==5004== by 0x808ADDD: __ast_read (channel.c:2423) ==5004== by 0x808B27C: ast_read (channel.c:2510) ==5004== by 0x540EFC3: wait_for_answer (app_queue.c:2389) ==5004== by 0x5410B80: try_calling (app_queue.c:2956) ==5004== by 0x54156CE: queue_exec (app_queue.c:4076) ==5004== ==5004== Thread 40: ==5004== Invalid read of size 1 ==5004== at 0x560B5B1: unpack (packing.c:163) ==5004== by 0x5602B9F: iLBC_decode (iLBC_decode.c:401) ==5004== by 0x5601C8E: ilbctolin_framein (codec_ilbc.c:147) ==5004== by 0x811076A: framein (translate.c:201) ==5004== by 0x811149B: ast_translate (translate.c:354) ==5004== by 0x808AF79: __ast_read (channel.c:2453) ==5004== by 0x808B27C: ast_read (channel.c:2510) ==5004== by 0x46AA1CF: wait_for_answer (app_dial.c:723) ==5004== by 0x46AD82C: dial_exec_full (app_dial.c:1417) ==5004== by 0x46AFB9F: dial_exec (app_dial.c:1843) ==5004== by 0x80D0FF4: pbx_exec (strings.h:36) ==5004== by 0x80D4A38: pbx_extension_helper (pbx.c:1864) ==5004== Address 0x0 is not stack'd, malloc'd or (recently) free'd ==5004== ==5004== ==5004== Process terminating with default action of signal 11 (SIGSEGV): dumping core ==5004== Access not within mapped region at address 0x0 ==5004== at 0x560B5B1: unpack (packing.c:163) ==5004== by 0x5602B9F: iLBC_decode (iLBC_decode.c:401) ==5004== by 0x5601C8E: ilbctolin_framein (codec_ilbc.c:147) ==5004== by 0x811076A: framein (translate.c:201) ==5004== by 0x811149B: ast_translate (translate.c:354) ==5004== by 0x808AF79: __ast_read (channel.c:2453) ==5004== by 0x808B27C: ast_read (channel.c:2510) ==5004== by 0x46AA1CF: wait_for_answer (app_dial.c:723) ==5004== by 0x46AD82C: dial_exec_full (app_dial.c:1417) ==5004== by 0x46AFB9F: dial_exec (app_dial.c:1843) ==5004== by 0x80D0FF4: pbx_exec (strings.h:36) ==5004== by 0x80D4A38: pbx_extension_helper (pbx.c:1864) ==5004== If you believe this happened as a result of a stack ==5004== overflow in your program's main thread (unlikely but ==5004== possible), you can try to increase the size of the ==5004== main thread stack using the --main-stacksize= flag. ==5004== The main thread stack size used in this run was 10485760. ==5004== ==5004== HEAP SUMMARY: ==5004== in use at exit: 1,428,278 bytes in 6,035 blocks ==5004== total heap usage: 13,137 allocs, 7,102 frees, 3,557,747 bytes allocated ==5004== ==5004== LEAK SUMMARY: ==5004== definitely lost: 1,211 bytes in 36 blocks ==5004== indirectly lost: 864 bytes in 36 blocks ==5004== possibly lost: 567,533 bytes in 208 blocks ==5004== still reachable: 858,670 bytes in 5,755 blocks ==5004== suppressed: 0 bytes in 0 blocks ==5004== Rerun with --leak-check=full to see details of leaked memory ==5004== ==5004== For counts of detected and suppressed errors, rerun with: -v ==5004== ERROR SUMMARY: 29947 errors from 20 contexts (suppressed: 1179 from 14)