(gdb) bt full
#0  0xb7d754ac in free () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.
#1  0xb7d6df43 in _IO_free_backup_area () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.
#2  0xb7d6e743 in __underflow () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.
#3  0xb7d6b18c in ?? () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.
#4  0xb7d6d2a8 in _IO_sgetn () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.
#5  0xb7d612ee in fread () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.
#6  0xb790999c in wav_read (s=0x83d1b78, whennext=0xb4ba1454) at format_wav.c:378
        res = <value optimized out>
        samples = <value optimized out>
        x = <value optimized out>
        bytes = 0
        here = <value optimized out>
        fs = (struct wav_desc *) 0x83d1d74
        __PRETTY_FUNCTION__ = "wav_read"
#7  0x08094031 in read_frame (s=0xb4b26ff8, whennext=0x0) at file.c:717
        fr = <value optimized out>
        new_fr = <value optimized out>
#8  0x08094368 in ast_readframe (s=0x83d1b78) at file.c:738
        whennext = 0
#9  0xb6d15fe8 in moh_files_generator (chan=0xb3a8f500, data=0x82be578, len=160, samples=160) at res_musiconhold.c:274
        state = (struct moh_files_state *) 0x82be578
        f = (struct ast_frame *) 0xa0
        res = 0
        __PRETTY_FUNCTION__ = "moh_files_generator"
#10 0x0807818a in ast_read_generator_actions (chan=0xb3a8f500, f=0xb3b66c3c) at channel.c:2014
        tmp = (void *) 0x82be578
        generate = (int (*)(struct ast_channel *, void *, int, int)) 0xb6d15f60 <moh_files_generator>
        res = <value optimized out>
        samples = 160
        __PRETTY_FUNCTION__ = "ast_read_generator_actions"
#11 0x0807f6df in __ast_read (chan=0xb3a8f500, dropaudio=0) at channel.c:2496
        readq_tail = (struct ast_frame *) 0x0
        f = (struct ast_frame *) 0xb3b66c3c
        blah = -1210641439
        count = 2048
        __PRETTY_FUNCTION__ = "__ast_read"
#12 0x080bb21c in bridge_p2p_loop (c0=0xb3a8f500, c1=0x81d8f40, p0=0xb3b66c38, p1=0x85f92c8, timeoutms=-1, flags=0, fo=0xb4ba1a2c, rc=0xb4ba1a28, pvt0=0xb3de8be8,
    pvt1=0x865c7a0) at rtp.c:3315
        fr = <value optimized out>
        who = (struct ast_channel *) 0xb4b26ff8
        other = (struct ast_channel *) 0x81d8f40
        cs = {0x81d8f40, 0xb3a8f500, 0xb3a8f500}
        p0_fds = {-1, -1}
        p1_fds = {-1, -1}
        p0_iod = {0x0, 0x0}
---Type <return> to continue, or q <return> to quit---
        p1_iod = {0x0, 0x0}
        p0_callback = 0
        p1_callback = 0
        res = <value optimized out>
        __PRETTY_FUNCTION__ = "bridge_p2p_loop"
#13 0x080be25a in ast_rtp_bridge (c0=0xb3a8f500, c1=0x81d8f40, flags=0, fo=0xb4ba1a2c, rc=0xb4ba1a28, timeoutms=-1) at rtp.c:3540
        fmt0 = {visible = 1, bits = 8, name = 0x811001f "alaw", desc = 0x8110024 "G.711 A-law", fr_len = 80, min_ms = 10, max_ms = 150, inc_ms = 10, def_ms = 20, flags = 0,
  cur_ms = 20}
        fmt1 = {visible = 1, bits = 8, name = 0x811001f "alaw", desc = 0x8110024 "G.711 A-law", fr_len = 80, min_ms = 10, max_ms = 150, inc_ms = 10, def_ms = 20, flags = 0,
  cur_ms = 20}
        p0 = (struct ast_rtp *) 0xb3b66c38
        p1 = (struct ast_rtp *) 0x85f92c8
        vp0 = (struct ast_rtp *) 0x0
        vp1 = (struct ast_rtp *) 0x0
        pr0 = (struct ast_rtp_protocol *) 0xb7a37780
        pr1 = (struct ast_rtp_protocol *) 0xb7a37780
        audio_p0_res = AST_RTP_TRY_PARTIAL
        video_p0_res = <value optimized out>
        audio_p1_res = AST_RTP_TRY_PARTIAL
        video_p1_res = <value optimized out>
        res = <value optimized out>
        codec0 = 2316
        codec1 = <value optimized out>
        pvt0 = (void *) 0xb3de8be8
        pvt1 = (void *) 0x865c7a0
        __PRETTY_FUNCTION__ = "ast_rtp_bridge"
#14 0x0808136b in ast_channel_bridge (c0=0xb3a8f500, c1=0x81d8f40, config=0xb4ba2230, fo=0xb4ba1a2c, rc=0xb4ba1a28) at channel.c:4543
        to = -1
        res = <value optimized out>
        nativefailed = 0
        firstpass = 1
        o0nativeformats = 8
        o1nativeformats = 8
        time_left_ms = 0
        caller_warning = 0 '\0'
        callee_warning = 0 '\0'
        __PRETTY_FUNCTION__ = "ast_channel_bridge"
#15 0xb7cbea4c in ast_bridge_call (chan=0xb3a8f500, peer=0x81d8f40, config=0xb4ba2230) at res_features.c:1806
        other = (struct ast_channel *) 0x0
        f = (struct ast_frame *) 0x0
        who = (struct ast_channel *) 0x0
        chan_featurecode = '\0' <repeats 11 times>
        peer_featurecode = '\0' <repeats 11 times>
        orig_channame = "SIP/BTNGN2-b3de8be8\000\fZì·\000P\213ü®g\000\000\000õ¨³ÿÿÿÿÈ\033º´5¡\a\bxõ¨³ÿÿÿÿ\000\000\000\000\000\000\000\000xõ¨³Q\223\035\b\000\000\000\000\000õ¨³"
        orig_peername = "SIP/K920900687-0865c7a0\000$\000\000\000®g\000\000ÿ9×·`!å·1Eì·4\000\000\0001ì\t\000Ð#õ\b$\000\000\000®g\000\000\v\000\000\000¦c\032µ¨\033º´\000õ¨³"
        res = 0
        diff = <value optimized out>
        hasfeatures = 0
        backup_config = {features_caller = {flags = 0}, features_callee = {flags = 0}, start_time = {tv_sec = 0, tv_usec = 0}, nexteventts = {tv_sec = 0, tv_usec = 0},
  partialfeature_timer = {tv_sec = 0, tv_usec = 0}, feature_timer = 0, timelimit = 0, play_warning = 0, warning_freq = 0, warning_sound = 0x0, end_sound = 0x0,
---Type <return> to continue, or q <return> to quit---
  start_sound = 0x0, firstpass = 0, flags = 0, end_bridge_callback = 0, end_bridge_callback_data = 0x0, end_bridge_callback_data_fixup = 0}
        bridge_cdr = (struct ast_cdr *) 0x8a65798
        chan_cdr = (struct ast_cdr *) 0xb47fb988
        peer_cdr = (struct ast_cdr *) 0x864bcd8
        new_chan_cdr = <value optimized out>
        new_peer_cdr = <value optimized out>
        __PRETTY_FUNCTION__ = "ast_bridge_call"
#16 0xb51a4d85 in dial_exec_full (chan=0xb3a8f500, data=0xb4ba2e37, peerflags=0xb4ba2de4, continue_exec=0x0) at app_dial.c:1812
        config = {features_caller = {flags = 0}, features_callee = {flags = 0}, start_time = {tv_sec = 1258377130, tv_usec = 972965}, nexteventts = {tv_sec = 0,
    tv_usec = 0}, partialfeature_timer = {tv_sec = 0, tv_usec = 0}, feature_timer = 0, timelimit = 0, play_warning = 0, warning_freq = 0, warning_sound = 0x0,
  end_sound = 0x0, start_sound = 0x0, firstpass = 0, flags = 0, end_bridge_callback = 0xb51a03b0 <end_bridge_callback>, end_bridge_callback_data = 0xb3a8f500,
  end_bridge_callback_data_fixup = 0xb519fff0 <end_bridge_callback_data_fixup>}
        number = <value optimized out>
        res = <value optimized out>
        u = (struct ast_module_user *) 0x8900328
        rest = 0x0
        outgoing = (struct dial_localuser *) 0x8f0f3f0
        peer = (struct ast_channel *) 0x81d8f40
        to = 57567
        numbusy = 0
        numcongestion = 0
        numnochan = 0
        cause = 0
        numsubst = "K920900685", '\0' <repeats 34 times>, "\026\000\000\000\000\000\000´\000\000\000\000\000\000\000\000ÿÿÿÿ@\tå·ÿÿÿÿ\000\000\000\000*750100\000ÿÿÿÿ\000\000\0007", '\0' <repeats 20 times>, "@\tå·", '\0' <repeats 12 times>, "@\tå·", '\0' <repeats 44 times>, "$ÞÖ·\000\000\000\000\000\000\000\000ô\017å·~o\020\b´,º´û\000\000\000\000 î·´,º´$ÓÜ·û\000\000\000¤µÖ·\001\000\000\000\000 î·û\000\000\000à\024å·à\024å·à,º´U²Ö·à\024å·"
        cidname = '\0' <repeats 79 times>
        privdb_val = 0
        calldurationlimit = -1
        timelimit = 0
        play_warning = 0
        warning_freq = 0
        warning_sound = 0x0
        end_sound = 0x0
        start_sound = 0x0
        dtmfcalled = 0x0
        dtmfcalling = 0x0
        status = "ANSWER\000R\000GS", '\0' <repeats 244 times>
        play_to_caller = 0
        play_to_callee = 0
        sentringing = 0
        moh = 0
        outbound_group = 0x0
        result = 0
        start_time = 1258377128
        privintro = '\0' <repeats 124 times>, "\203ßÖ·", '\0' <repeats 12 times>, "\207\200\020\b\207\200\020\b\234¹\177´ô\017å·\206\200\020\b\001\000\000\000¨)º´ÏGÔ·Ì)º´\206\200\020\b\001", '\0' <repeats 19 times>, "ÔÿÿÿÔÿÿÿÔÿÿÿ\000\000\000\000\000\000\000\000ÿ_Ô·", '\0' <repeats 16 times>, "\034)º´", '\0' <repeats 28 times>, "`*º´\000\000\000\000\000\000\000\000\a\000\000\000\000\000\000\000ô\017å·\000\000\000\000\203ßÖ·4$º´\000\000\000\000ÿÿÿÿ\025\000\000\000\207\200\020\b\177\200\020\b\000\000\000\000\034)º´\001", '\0' <repeats 15 times>, "å\033"...
        privcid = "\000\000\000\000l*º´O\000\000\000\001\200­û\210¹\177´\210¹\177´\210¹\177´\210¹\177´\235¹\177´×¹\177´\210¹\177´×¹\177´", '\0' <repeats 20 times>, "d-º´\000\000\000\000Üÿÿÿ\000\000\000ÿ\000\000\000\000\001\000\000\000\001\000\000\000$ÞÖ·\035\000\000\000\000\000\000\000ô\017å·ÜÿÿÿÿÿÿÿÜÿÿÿ|*º´x,º´Ç,º´\234+º´á\023×·|*º´x,º´h+º´\020\---Type <return> to continue, or q <return> to quit---
000\000\000@\tå·\000\000\000\000´+º´È__\bh!å·\034+º´\234dã·\001\200­ûÐ__\b<q\020\b\001\000\000\000\001\000\000\000ÿÿ"...
        opermode = 0
        args = {argc = 4, argv = 0xb4ba22a8, peers = 0xb4ba1c60 "SIP", timeout = 0xb4ba1c8d "60", options = 0xb4ba1c90 "r", url = 0xb4ba1c92 "M(setmusiconhold|K9209)"}
        opts = {flags = 131072}
        opt_args = {0x0, 0x0, 0x0, 0x0, 0x8d6ea60 "L1", 0x80200 <Address 0x80200 out of bounds>, 0xb5634dc0 "ðMcµ", 0x0, 0xb4ba2db1 "7\206·7.º´è-º´-a\032µ"}
        datastore = (struct ast_datastore *) 0x87b1a38
        fulldial = 0
        num_dialed = 3
        __PRETTY_FUNCTION__ = "dial_exec_full"
#17 0xb51a612d in dial_exec (chan=0xb3a8f500, data=0xb4ba2e37) at app_dial.c:1851
        peerflags = {flags = 2147483648}
#18 0x080b1307 in pbx_exec (c=0xb3a8f500, app=0xb7863738, data=0xb4ba2e37) at pbx.c:536
        res = -1263374344
        saved_c_appl = 0xb59aa84c "ExecIf"
        saved_c_data = 0xb4ba5148 "1|Dial|SIP/K920900687&SIP/K920900628&SIP/K920900685|60|r|M(setmusiconhold|K9209)"
#19 0xb6d39b5f in execif_exec (chan=0xb3a8f500, data=0xb4ba5148) at app_exec.c:184
        res = <value optimized out>
        u = (struct ast_module_user *) 0x884ce10
        myapp = 0xb4ba2e32 "Dial"
        mydata = 0xb4ba2e37 "SIP/K920900687&SIP/K920900628&SIP/K920900685|60|r|M(setmusiconhold|K9209)"
        app = <value optimized out>
        __PRETTY_FUNCTION__ = "execif_exec"
#20 0x080b1307 in pbx_exec (c=0xb3a8f500, app=0xb59aa838, data=0xb4ba5148) at pbx.c:536
        res = -1263374344
        saved_c_appl = 0x0
        saved_c_data = 0x0
#21 0x080b66f3 in pbx_extension_helper (c=0xb3a8f500, con=<value optimized out>, context=0xb3a8f680 "main-functions", exten=0xb3a8f6d0 "*750100", priority=7, label=0x0,
    callerid=0x82df3a0 "%231060244925", action=E_SPAWN) at pbx.c:1863
        e = <value optimized out>
        app = (struct ast_app *) 0xb59aa838
        res = <value optimized out>
        q = {incstack = {0x0 <repeats 128 times>}, stacklen = 0, status = 5, swo = 0x0, data = 0x0, foundcontext = 0xb3a8f680 "main-functions"}
        passdata = "1|Dial|SIP/K920900687&SIP/K920900628&SIP/K920900685|60|r|M(setmusiconhold|K9209)", '\0' <repeats 8111 times>
        matching_action = 0
        __PRETTY_FUNCTION__ = "pbx_extension_helper"
#22 0x080b79f9 in __ast_pbx_run (c=0xb3a8f500) at pbx.c:2373
        dst_exten = '\0' <repeats 36 times>, "\200sº´× \016\b\000\000\000\000\000\000\000\000ô\037í·p\223ì·\000\000\000@\221\035×·", '\0' <repeats 24 times>, "4sº´\000\000\000\0008sº´<sº´\220!å·Hsº´\020\000\000\000\002\000\000\000Lsº´", '\0' <repeats 20 times>, "\030g ¶\030\000\200·\000\000\000\000\234dã·Psº´¦·ì·\000\000\000\0001Eì·á\023×·À*Ô¶\220ùÖ·\f\000\000\000®g\000\000ô\017å·`!å·\f\000\000\000Xsº´ÿ9×·`!å·\f\000\000\000 g ¶1ì\t\000Ð#õ\b\f\000\000\000Ðà×\b¨$"...
        pos = 0
        digit = -1262849120
        found = 1
        res = 0
        error = <value optimized out>
        emc = <value optimized out>
        __PRETTY_FUNCTION__ = "__ast_pbx_run"
#23 0x080b8dfe in pbx_thread (data=0xb3a8f500) at pbx.c:2599
No locals.
#24 0x080e20a7 in dummy_start (data=0xb6a06720) at utils.c:856
        __cancel_buf = {__cancel_jmp_buf = {{__cancel_jmp_buf = {-1278991192, 0, -1262847088, -1262849064, 1648820368, 182524393}, __mask_was_saved = 0}}, __pad = {
    0xb4ba7490, 0x0, 0xb4ba73d4, 0xb7e50ff4}}
---Type <return> to continue, or q <return> to quit---
        __cancel_arg = (void *) 0xb4ba7b90
        not_first_call = <value optimized out>
        ret = <value optimized out>
#25 0xb7ec24fb in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#26 0xb7ddce5e in clone () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.