Core was generated by `/usr/sbin/asterisk -f -vvvg -c'. Program terminated with signal 11, Segmentation fault. [New process 28871] #0 0x00897b9f in audiohook_inheritance_destroy (data=0x8a429e8) at func_audiohookinherit.c:94 94 while ((inheritable_audiohook = AST_LIST_REMOVE_HEAD(&audiohook_inheritance_datastore->allowed_list, list))) { (gdb) bt #0 0x00897b9f in audiohook_inheritance_destroy (data=0x8a429e8) at func_audiohookinherit.c:94 #1 0x08089d7e in ast_channel_datastore_free (datastore=0x89b48c0) at channel.c:1372 #2 0x080893ec in ast_channel_free (chan=0xb66f0fc0) at channel.c:1272 #3 0x0808a9cb in ast_hangup (chan=0xb66f0fc0) at channel.c:1595 #4 0x00257e5f in ast_bridge_call_thread (data=0xb67ec6e8) at res_features.c:281 #5 0x0812374c in dummy_start (data=0xb67ff268) at utils.c:856 #6 0x00ad55ab in start_thread () from /lib/libpthread.so.0 #7 0x001e1cfe in clone () from /lib/libc.so.6 (gdb) bt full #0 0x00897b9f in audiohook_inheritance_destroy (data=0x8a429e8) at func_audiohookinherit.c:94 cur = (struct inheritable_audiohook *) 0x4a434344 audiohook_inheritance_datastore = ( struct audiohook_inheritance_datastore *) 0x8a429e8 inheritable_audiohook = (struct inheritable_audiohook *) 0x0 __PRETTY_FUNCTION__ = "audiohook_inheritance_destroy" #1 0x08089d7e in ast_channel_datastore_free (datastore=0x89b48c0) at channel.c:1372 res = 0 __PRETTY_FUNCTION__ = "ast_channel_datastore_free" #2 0x080893ec in ast_channel_free (chan=0xb66f0fc0) at channel.c:1272 fd = 0 vardata = (struct ast_var_t *) 0x0 f = (struct ast_frame *) 0x0 headp = (struct varshead *) 0xb66f13c4 datastore = (struct ast_datastore *) 0x89b48c0 name = "h\030\030\b\234\022Eµ\210\022Eµ\000\000\000\000\025ÈùJÜ\206\016\000\000\000\000\000\000\000\001\000(·²\b\025ÈùJÜ\206\016\000\234\022Eµcall,all", '\0' dashptr = 0x0 inlist = 0 __PRETTY_FUNCTION__ = "ast_channel_free" #3 0x0808a9cb in ast_hangup (chan=0xb66f0fc0) at channel.c:1595 res = 0 __PRETTY_FUNCTION__ = "ast_hangup" #4 0x00257e5f in ast_bridge_call_thread (data=0xb67ec6e8) at res_features.c:281 tobj = (struct ast_bridge_thread_obj *) 0xb67ec6e8 __PRETTY_FUNCTION__ = "ast_bridge_call_thread" #5 0x0812374c in dummy_start (data=0xb67ff268) at utils.c:856 __cancel_buf = {__cancel_jmp_buf = {{__cancel_jmp_buf = {11419636, 0, -1253762160, -1253764152, -129119459, 1159392895}, __mask_was_saved = 0}}, __pad = {0xb5451480, 0x0, 0x816044c, 0x13a}} __cancel_routine = (void (*)(void *)) 0x8069840 __cancel_arg = (void *) 0xb5451b90 not_first_call = 0 ret = (void *) 0xad4bcc a = {start_routine = 0x257dbe , data = 0xb67ec6e8, name = 0xb67ffe98 "ast_bridge_call_thread started at [ 295] res_features.c ast_bridge_call_thread_launch()"} lock_info = (struct thr_lock_info *) 0x8936238 mutex_attr = {__size = "\001\000\000", __align = 1} __PRETTY_FUNCTION__ = "dummy_start" #6 0x00ad55ab in start_thread () from /lib/libpthread.so.0 No symbol table info available. #7 0x001e1cfe in clone () from /lib/libc.so.6 No symbol table info available. (gdb) (gdb) thread apply all bt Thread 1 (process 28871): #0 0x00897b9f in audiohook_inheritance_destroy (data=0x8a429e8) at func_audiohookinherit.c:94 #1 0x08089d7e in ast_channel_datastore_free (datastore=0x89b48c0) at channel.c:1372 #2 0x080893ec in ast_channel_free (chan=0xb66f0fc0) at channel.c:1272 #3 0x0808a9cb in ast_hangup (chan=0xb66f0fc0) at channel.c:1595 #4 0x00257e5f in ast_bridge_call_thread (data=0xb67ec6e8) at res_features.c:281 #5 0x0812374c in dummy_start (data=0xb67ff268) at utils.c:856 #6 0x00ad55ab in start_thread () from /lib/libpthread.so.0 #7 0x001e1cfe in clone () from /lib/libc.so.6