==5775== Memcheck, a memory error detector ==5775== Copyright (C) 2002-2009, and GNU GPL'd, by Julian Seward et al. ==5775== Using Valgrind-3.5.0-Debian and LibVEX; rerun with -h for copyright info ==5775== Command: asterisk -vvvvvvvgc ==5775== Parent PID: 2533 ==5775== ==5775== Invalid read of size 1 ==5775== at 0x4012F1D: _dl_close (dl-close.c:729) ==5775== by 0x445FCA3: dlclose_doit (dlclose.c:37) ==5775== by 0x400D4E5: _dl_catch_error (dl-error.c:178) ==5775== by 0x446009B: _dlerror_run (dlerror.c:164) ==5775== by 0x445FCD9: dlclose (dlclose.c:48) ==5775== by 0x80EA90F: load_dynamic_module (loader.c:412) ==5775== by 0x80EC631: load_resource (loader.c:778) ==5775== by 0x80EC92F: load_resource_list (loader.c:884) ==5775== by 0x80ECDF7: load_modules (loader.c:1047) ==5775== by 0x807B008: main (asterisk.c:3656) ==5775== Address 0x4c2caa8 is 512 bytes inside a block of size 657 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x40129D9: _dl_close_worker (dl-close.c:664) ==5775== by 0x4012F46: _dl_close (dl-close.c:742) ==5775== by 0x445FCA3: dlclose_doit (dlclose.c:37) ==5775== by 0x400D4E5: _dl_catch_error (dl-error.c:178) ==5775== by 0x446009B: _dlerror_run (dlerror.c:164) ==5775== by 0x445FCD9: dlclose (dlclose.c:48) ==5775== by 0x80EA90F: load_dynamic_module (loader.c:412) ==5775== by 0x80EC631: load_resource (loader.c:778) ==5775== by 0x80EC92F: load_resource_list (loader.c:884) ==5775== by 0x80ECDF7: load_modules (loader.c:1047) ==5775== by 0x807B008: main (asterisk.c:3656) ==5775== ==5775== Invalid read of size 1 ==5775== at 0x4025BB8: strlen (mc_replace_strmem.c:277) ==5775== by 0x400D5C5: _dl_signal_error (dl-error.c:87) ==5775== by 0x4012FA5: _dl_close (dl-close.c:737) ==5775== by 0x445FCA3: dlclose_doit (dlclose.c:37) ==5775== by 0x400D4E5: _dl_catch_error (dl-error.c:178) ==5775== by 0x446009B: _dlerror_run (dlerror.c:164) ==5775== by 0x445FCD9: dlclose (dlclose.c:48) ==5775== by 0x80EA90F: load_dynamic_module (loader.c:412) ==5775== by 0x80EC631: load_resource (loader.c:778) ==5775== by 0x80EC92F: load_resource_list (loader.c:884) ==5775== by 0x80ECDF7: load_modules (loader.c:1047) ==5775== by 0x807B008: main (asterisk.c:3656) ==5775== Address 0x4c2c848 is 0 bytes inside a block of size 45 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x4012946: _dl_close_worker (dl-close.c:636) ==5775== by 0x4012F46: _dl_close (dl-close.c:742) ==5775== by 0x445FCA3: dlclose_doit (dlclose.c:37) ==5775== by 0x400D4E5: _dl_catch_error (dl-error.c:178) ==5775== by 0x446009B: _dlerror_run (dlerror.c:164) ==5775== by 0x445FCD9: dlclose (dlclose.c:48) ==5775== by 0x80EA90F: load_dynamic_module (loader.c:412) ==5775== by 0x80EC631: load_resource (loader.c:778) ==5775== by 0x80EC92F: load_resource_list (loader.c:884) ==5775== by 0x80ECDF7: load_modules (loader.c:1047) ==5775== by 0x807B008: main (asterisk.c:3656) ==5775== ==5775== Invalid read of size 1 ==5775== at 0x4025BC3: strlen (mc_replace_strmem.c:277) ==5775== by 0x400D5C5: _dl_signal_error (dl-error.c:87) ==5775== by 0x4012FA5: _dl_close (dl-close.c:737) ==5775== by 0x445FCA3: dlclose_doit (dlclose.c:37) ==5775== by 0x400D4E5: _dl_catch_error (dl-error.c:178) ==5775== by 0x446009B: _dlerror_run (dlerror.c:164) ==5775== by 0x445FCD9: dlclose (dlclose.c:48) ==5775== by 0x80EA90F: load_dynamic_module (loader.c:412) ==5775== by 0x80EC631: load_resource (loader.c:778) ==5775== by 0x80EC92F: load_resource_list (loader.c:884) ==5775== by 0x80ECDF7: load_modules (loader.c:1047) ==5775== by 0x807B008: main (asterisk.c:3656) ==5775== Address 0x4c2c849 is 1 bytes inside a block of size 45 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x4012946: _dl_close_worker (dl-close.c:636) ==5775== by 0x4012F46: _dl_close (dl-close.c:742) ==5775== by 0x445FCA3: dlclose_doit (dlclose.c:37) ==5775== by 0x400D4E5: _dl_catch_error (dl-error.c:178) ==5775== by 0x446009B: _dlerror_run (dlerror.c:164) ==5775== by 0x445FCD9: dlclose (dlclose.c:48) ==5775== by 0x80EA90F: load_dynamic_module (loader.c:412) ==5775== by 0x80EC631: load_resource (loader.c:778) ==5775== by 0x80EC92F: load_resource_list (loader.c:884) ==5775== by 0x80ECDF7: load_modules (loader.c:1047) ==5775== by 0x807B008: main (asterisk.c:3656) ==5775== ==5775== Invalid read of size 1 ==5775== at 0x4016567: memcpy (memcpy.c:44) ==5775== by 0x400D629: _dl_signal_error (dl-error.c:94) ==5775== by 0x4012FA5: _dl_close (dl-close.c:737) ==5775== by 0x445FCA3: dlclose_doit (dlclose.c:37) ==5775== by 0x400D4E5: _dl_catch_error (dl-error.c:178) ==5775== by 0x446009B: _dlerror_run (dlerror.c:164) ==5775== by 0x445FCD9: dlclose (dlclose.c:48) ==5775== by 0x80EA90F: load_dynamic_module (loader.c:412) ==5775== by 0x80EC631: load_resource (loader.c:778) ==5775== by 0x80EC92F: load_resource_list (loader.c:884) ==5775== by 0x80ECDF7: load_modules (loader.c:1047) ==5775== by 0x807B008: main (asterisk.c:3656) ==5775== Address 0x4c2c848 is 0 bytes inside a block of size 45 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x4012946: _dl_close_worker (dl-close.c:636) ==5775== by 0x4012F46: _dl_close (dl-close.c:742) ==5775== by 0x445FCA3: dlclose_doit (dlclose.c:37) ==5775== by 0x400D4E5: _dl_catch_error (dl-error.c:178) ==5775== by 0x446009B: _dlerror_run (dlerror.c:164) ==5775== by 0x445FCD9: dlclose (dlclose.c:48) ==5775== by 0x80EA90F: load_dynamic_module (loader.c:412) ==5775== by 0x80EC631: load_resource (loader.c:778) ==5775== by 0x80EC92F: load_resource_list (loader.c:884) ==5775== by 0x80ECDF7: load_modules (loader.c:1047) ==5775== by 0x807B008: main (asterisk.c:3656) ==5775== ==5775== Invalid read of size 1 ==5775== at 0x4016577: memcpy (memcpy.c:61) ==5775== by 0x400D629: _dl_signal_error (dl-error.c:94) ==5775== by 0x4012FA5: _dl_close (dl-close.c:737) ==5775== by 0x445FCA3: dlclose_doit (dlclose.c:37) ==5775== by 0x400D4E5: _dl_catch_error (dl-error.c:178) ==5775== by 0x446009B: _dlerror_run (dlerror.c:164) ==5775== by 0x445FCD9: dlclose (dlclose.c:48) ==5775== by 0x80EA90F: load_dynamic_module (loader.c:412) ==5775== by 0x80EC631: load_resource (loader.c:778) ==5775== by 0x80EC92F: load_resource_list (loader.c:884) ==5775== by 0x80ECDF7: load_modules (loader.c:1047) ==5775== by 0x807B008: main (asterisk.c:3656) ==5775== Address 0x4c2ce55 is 37 bytes inside a block of size 38 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x4012946: _dl_close_worker (dl-close.c:636) ==5775== by 0x4012F46: _dl_close (dl-close.c:742) ==5775== by 0x445FCA3: dlclose_doit (dlclose.c:37) ==5775== by 0x400D4E5: _dl_catch_error (dl-error.c:178) ==5775== by 0x446009B: _dlerror_run (dlerror.c:164) ==5775== by 0x445FCD9: dlclose (dlclose.c:48) ==5775== by 0x80EA90F: load_dynamic_module (loader.c:412) ==5775== by 0x80EC631: load_resource (loader.c:778) ==5775== by 0x80EC92F: load_resource_list (loader.c:884) ==5775== by 0x80ECDF7: load_modules (loader.c:1047) ==5775== by 0x807B008: main (asterisk.c:3656) ==5775== ==5775== Syscall param ioctl(generic) points to uninitialised byte(s) ==5775== at 0x42B6629: ioctl (in /lib/tls/i686/cmov/libc-2.10.1.so) ==5775== by 0x540CA69: ??? (in /usr/lib/asterisk/modules/chan_mobile.so) ==5775== by 0x80EC377: start_resource (loader.c:727) ==5775== by 0x80ECA06: load_resource_list (loader.c:905) ==5775== by 0x80ECE0D: load_modules (loader.c:1052) ==5775== by 0x807B008: main (asterisk.c:3656) ==5775== Address 0xbedcc0d6 is on thread 1's stack ==5775== ==5775== Thread 45: ==5775== Invalid read of size 4 ==5775== at 0x80DD3F0: ast_frdup (frame.c:494) ==5775== by 0x814E4E5: ast_slinfactory_feed (slinfactory.c:119) ==5775== by 0x8081C75: ast_audiohook_write_frame (audiohook.c:155) ==5775== by 0x80823A0: audio_audiohook_write_list (audiohook.c:604) ==5775== by 0x80A49F1: ast_write (channel.c:3517) ==5775== by 0x80A5F9E: ast_channel_bridge (channel.c:4900) ==5775== by 0x80CBEDF: ast_bridge_call (features.c:2585) ==5775== by 0x5670F68: dial_exec_full (app_dial.c:2258) ==5775== by 0x5673D9C: dial_exec (app_dial.c:2342) ==5775== by 0x8107584: pbx_exec (pbx.c:1348) ==5775== by 0x8116665: pbx_extension_helper (pbx.c:3708) ==5775== by 0x811B263: T.903 (pbx.c:4167) ==5775== Address 0x74cb594 is 20 bytes inside a block of size 187 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x80817BD: audiohook_read_frame_both (audiohook.c:252) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== ==5775== Invalid read of size 4 ==5775== at 0x80DD3F3: ast_frdup (frame.c:493) ==5775== by 0x814E4E5: ast_slinfactory_feed (slinfactory.c:119) ==5775== by 0x8081C75: ast_audiohook_write_frame (audiohook.c:155) ==5775== by 0x80823A0: audio_audiohook_write_list (audiohook.c:604) ==5775== by 0x80A49F1: ast_write (channel.c:3517) ==5775== by 0x80A5F9E: ast_channel_bridge (channel.c:4900) ==5775== by 0x80CBEDF: ast_bridge_call (features.c:2585) ==5775== by 0x5670F68: dial_exec_full (app_dial.c:2258) ==5775== by 0x5673D9C: dial_exec (app_dial.c:2342) ==5775== by 0x8107584: pbx_exec (pbx.c:1348) ==5775== by 0x8116665: pbx_extension_helper (pbx.c:3708) ==5775== by 0x811B263: T.903 (pbx.c:4167) ==5775== Address 0x74cb5b0 is 48 bytes inside a block of size 187 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x80817BD: audiohook_read_frame_both (audiohook.c:252) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== ==5775== Invalid write of size 4 ==5775== at 0x80DD4C8: ast_frdup (frame.c:497) ==5775== by 0x814E4E5: ast_slinfactory_feed (slinfactory.c:119) ==5775== by 0x8081C75: ast_audiohook_write_frame (audiohook.c:155) ==5775== by 0x80823A0: audio_audiohook_write_list (audiohook.c:604) ==5775== by 0x80A49F1: ast_write (channel.c:3517) ==5775== by 0x80A5F9E: ast_channel_bridge (channel.c:4900) ==5775== by 0x80CBEDF: ast_bridge_call (features.c:2585) ==5775== by 0x5670F68: dial_exec_full (app_dial.c:2258) ==5775== by 0x5673D9C: dial_exec (app_dial.c:2342) ==5775== by 0x8107584: pbx_exec (pbx.c:1348) ==5775== by 0x8116665: pbx_extension_helper (pbx.c:3708) ==5775== by 0x811B263: T.903 (pbx.c:4167) ==5775== Address 0x74cb5b0 is 48 bytes inside a block of size 187 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x80817BD: audiohook_read_frame_both (audiohook.c:252) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== ==5775== Invalid write of size 4 ==5775== at 0x80DD4E5: ast_frdup (string3.h:85) ==5775== by 0x814E4E5: ast_slinfactory_feed (slinfactory.c:119) ==5775== by 0x8081C75: ast_audiohook_write_frame (audiohook.c:155) ==5775== by 0x80823A0: audio_audiohook_write_list (audiohook.c:604) ==5775== by 0x80A49F1: ast_write (channel.c:3517) ==5775== by 0x80A5F9E: ast_channel_bridge (channel.c:4900) ==5775== by 0x80CBEDF: ast_bridge_call (features.c:2585) ==5775== by 0x5670F68: dial_exec_full (app_dial.c:2258) ==5775== by 0x5673D9C: dial_exec (app_dial.c:2342) ==5775== by 0x8107584: pbx_exec (pbx.c:1348) ==5775== by 0x8116665: pbx_extension_helper (pbx.c:3708) ==5775== by 0x811B263: T.903 (pbx.c:4167) ==5775== Address 0x74cb580 is 0 bytes inside a block of size 187 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x80817BD: audiohook_read_frame_both (audiohook.c:252) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== ==5775== Invalid write of size 4 ==5775== at 0x80DD4E9: ast_frdup (frame.c:499) ==5775== by 0x814E4E5: ast_slinfactory_feed (slinfactory.c:119) ==5775== by 0x8081C75: ast_audiohook_write_frame (audiohook.c:155) ==5775== by 0x80823A0: audio_audiohook_write_list (audiohook.c:604) ==5775== by 0x80A49F1: ast_write (channel.c:3517) ==5775== by 0x80A5F9E: ast_channel_bridge (channel.c:4900) ==5775== by 0x80CBEDF: ast_bridge_call (features.c:2585) ==5775== by 0x5670F68: dial_exec_full (app_dial.c:2258) ==5775== by 0x5673D9C: dial_exec (app_dial.c:2342) ==5775== by 0x8107584: pbx_exec (pbx.c:1348) ==5775== by 0x8116665: pbx_extension_helper (pbx.c:3708) ==5775== by 0x811B263: T.903 (pbx.c:4167) ==5775== Address 0x74cb594 is 20 bytes inside a block of size 187 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x80817BD: audiohook_read_frame_both (audiohook.c:252) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== ==5775== Invalid write of size 4 ==5775== at 0x80DD438: ast_frdup (frame.c:523) ==5775== by 0x814E4E5: ast_slinfactory_feed (slinfactory.c:119) ==5775== by 0x8081C75: ast_audiohook_write_frame (audiohook.c:155) ==5775== by 0x80823A0: audio_audiohook_write_list (audiohook.c:604) ==5775== by 0x80A49F1: ast_write (channel.c:3517) ==5775== by 0x80A5F9E: ast_channel_bridge (channel.c:4900) ==5775== by 0x80CBEDF: ast_bridge_call (features.c:2585) ==5775== by 0x5670F68: dial_exec_full (app_dial.c:2258) ==5775== by 0x5673D9C: dial_exec (app_dial.c:2342) ==5775== by 0x8107584: pbx_exec (pbx.c:1348) ==5775== by 0x8116665: pbx_extension_helper (pbx.c:3708) ==5775== by 0x811B263: T.903 (pbx.c:4167) ==5775== Address 0x74cb590 is 16 bytes inside a block of size 187 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x80817BD: audiohook_read_frame_both (audiohook.c:252) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== ==5775== Invalid write of size 4 ==5775== at 0x80DD43F: ast_frdup (frame.c:516) ==5775== by 0x814E4E5: ast_slinfactory_feed (slinfactory.c:119) ==5775== by 0x8081C75: ast_audiohook_write_frame (audiohook.c:155) ==5775== by 0x80823A0: audio_audiohook_write_list (audiohook.c:604) ==5775== by 0x80A49F1: ast_write (channel.c:3517) ==5775== by 0x80A5F9E: ast_channel_bridge (channel.c:4900) ==5775== by 0x80CBEDF: ast_bridge_call (features.c:2585) ==5775== by 0x5670F68: dial_exec_full (app_dial.c:2258) ==5775== by 0x5673D9C: dial_exec (app_dial.c:2342) ==5775== by 0x8107584: pbx_exec (pbx.c:1348) ==5775== by 0x8116665: pbx_extension_helper (pbx.c:3708) ==5775== by 0x811B263: T.903 (pbx.c:4167) ==5775== Address 0x74cb580 is 0 bytes inside a block of size 187 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x80817BD: audiohook_read_frame_both (audiohook.c:252) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== ==5775== Invalid write of size 4 ==5775== at 0x80DD444: ast_frdup (frame.c:519) ==5775== by 0x814E4E5: ast_slinfactory_feed (slinfactory.c:119) ==5775== by 0x8081C75: ast_audiohook_write_frame (audiohook.c:155) ==5775== by 0x80823A0: audio_audiohook_write_list (audiohook.c:604) ==5775== by 0x80A49F1: ast_write (channel.c:3517) ==5775== by 0x80A5F9E: ast_channel_bridge (channel.c:4900) ==5775== by 0x80CBEDF: ast_bridge_call (features.c:2585) ==5775== by 0x5670F68: dial_exec_full (app_dial.c:2258) ==5775== by 0x5673D9C: dial_exec (app_dial.c:2342) ==5775== by 0x8107584: pbx_exec (pbx.c:1348) ==5775== by 0x8116665: pbx_extension_helper (pbx.c:3708) ==5775== by 0x811B263: T.903 (pbx.c:4167) ==5775== Address 0x74cb58c is 12 bytes inside a block of size 187 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x80817BD: audiohook_read_frame_both (audiohook.c:252) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== ==5775== Invalid write of size 4 ==5775== at 0x80DD44A: ast_frdup (frame.c:524) ==5775== by 0x814E4E5: ast_slinfactory_feed (slinfactory.c:119) ==5775== by 0x8081C75: ast_audiohook_write_frame (audiohook.c:155) ==5775== by 0x80823A0: audio_audiohook_write_list (audiohook.c:604) ==5775== by 0x80A49F1: ast_write (channel.c:3517) ==5775== by 0x80A5F9E: ast_channel_bridge (channel.c:4900) ==5775== by 0x80CBEDF: ast_bridge_call (features.c:2585) ==5775== by 0x5670F68: dial_exec_full (app_dial.c:2258) ==5775== by 0x5673D9C: dial_exec (app_dial.c:2342) ==5775== by 0x8107584: pbx_exec (pbx.c:1348) ==5775== by 0x8116665: pbx_extension_helper (pbx.c:3708) ==5775== by 0x811B263: T.903 (pbx.c:4167) ==5775== Address 0x74cb598 is 24 bytes inside a block of size 187 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x80817BD: audiohook_read_frame_both (audiohook.c:252) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== ==5775== Invalid write of size 4 ==5775== at 0x80DD451: ast_frdup (frame.c:520) ==5775== by 0x814E4E5: ast_slinfactory_feed (slinfactory.c:119) ==5775== by 0x8081C75: ast_audiohook_write_frame (audiohook.c:155) ==5775== by 0x80823A0: audio_audiohook_write_list (audiohook.c:604) ==5775== by 0x80A49F1: ast_write (channel.c:3517) ==5775== by 0x80A5F9E: ast_channel_bridge (channel.c:4900) ==5775== by 0x80CBEDF: ast_bridge_call (features.c:2585) ==5775== by 0x5670F68: dial_exec_full (app_dial.c:2258) ==5775== by 0x5673D9C: dial_exec (app_dial.c:2342) ==5775== by 0x8107584: pbx_exec (pbx.c:1348) ==5775== by 0x8116665: pbx_extension_helper (pbx.c:3708) ==5775== by 0x811B263: T.903 (pbx.c:4167) ==5775== Address 0x74cb5ac is 44 bytes inside a block of size 187 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x80817BD: audiohook_read_frame_both (audiohook.c:252) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== ==5775== Invalid write of size 4 ==5775== at 0x80DD454: ast_frdup (frame.c:517) ==5775== by 0x814E4E5: ast_slinfactory_feed (slinfactory.c:119) ==5775== by 0x8081C75: ast_audiohook_write_frame (audiohook.c:155) ==5775== by 0x80823A0: audio_audiohook_write_list (audiohook.c:604) ==5775== by 0x80A49F1: ast_write (channel.c:3517) ==5775== by 0x80A5F9E: ast_channel_bridge (channel.c:4900) ==5775== by 0x80CBEDF: ast_bridge_call (features.c:2585) ==5775== by 0x5670F68: dial_exec_full (app_dial.c:2258) ==5775== by 0x5673D9C: dial_exec (app_dial.c:2342) ==5775== by 0x8107584: pbx_exec (pbx.c:1348) ==5775== by 0x8116665: pbx_extension_helper (pbx.c:3708) ==5775== by 0x811B263: T.903 (pbx.c:4167) ==5775== Address 0x74cb584 is 4 bytes inside a block of size 187 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x80817BD: audiohook_read_frame_both (audiohook.c:252) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== ==5775== Invalid write of size 4 ==5775== at 0x80DD45A: ast_frdup (frame.c:520) ==5775== by 0x814E4E5: ast_slinfactory_feed (slinfactory.c:119) ==5775== by 0x8081C75: ast_audiohook_write_frame (audiohook.c:155) ==5775== by 0x80823A0: audio_audiohook_write_list (audiohook.c:604) ==5775== by 0x80A49F1: ast_write (channel.c:3517) ==5775== by 0x80A5F9E: ast_channel_bridge (channel.c:4900) ==5775== by 0x80CBEDF: ast_bridge_call (features.c:2585) ==5775== by 0x5670F68: dial_exec_full (app_dial.c:2258) ==5775== by 0x5673D9C: dial_exec (app_dial.c:2342) ==5775== by 0x8107584: pbx_exec (pbx.c:1348) ==5775== by 0x8116665: pbx_extension_helper (pbx.c:3708) ==5775== by 0x811B263: T.903 (pbx.c:4167) ==5775== Address 0x74cb5a8 is 40 bytes inside a block of size 187 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x80817BD: audiohook_read_frame_both (audiohook.c:252) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== ==5775== Invalid write of size 4 ==5775== at 0x80DD45F: ast_frdup (frame.c:518) ==5775== by 0x814E4E5: ast_slinfactory_feed (slinfactory.c:119) ==5775== by 0x8081C75: ast_audiohook_write_frame (audiohook.c:155) ==5775== by 0x80823A0: audio_audiohook_write_list (audiohook.c:604) ==5775== by 0x80A49F1: ast_write (channel.c:3517) ==5775== by 0x80A5F9E: ast_channel_bridge (channel.c:4900) ==5775== by 0x80CBEDF: ast_bridge_call (features.c:2585) ==5775== by 0x5670F68: dial_exec_full (app_dial.c:2258) ==5775== by 0x5673D9C: dial_exec (app_dial.c:2342) ==5775== by 0x8107584: pbx_exec (pbx.c:1348) ==5775== by 0x8116665: pbx_extension_helper (pbx.c:3708) ==5775== by 0x811B263: T.903 (pbx.c:4167) ==5775== Address 0x74cb588 is 8 bytes inside a block of size 187 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x80817BD: audiohook_read_frame_both (audiohook.c:252) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== ==5775== Invalid write of size 4 ==5775== at 0x80DD4FE: ast_frdup (frame.c:526) ==5775== by 0x814E4E5: ast_slinfactory_feed (slinfactory.c:119) ==5775== by 0x8081C75: ast_audiohook_write_frame (audiohook.c:155) ==5775== by 0x80823A0: audio_audiohook_write_list (audiohook.c:604) ==5775== by 0x80A49F1: ast_write (channel.c:3517) ==5775== by 0x80A5F9E: ast_channel_bridge (channel.c:4900) ==5775== by 0x80CBEDF: ast_bridge_call (features.c:2585) ==5775== by 0x5670F68: dial_exec_full (app_dial.c:2258) ==5775== by 0x5673D9C: dial_exec (app_dial.c:2342) ==5775== by 0x8107584: pbx_exec (pbx.c:1348) ==5775== by 0x8116665: pbx_extension_helper (pbx.c:3708) ==5775== by 0x811B263: T.903 (pbx.c:4167) ==5775== Address 0x74cb5a0 is 32 bytes inside a block of size 187 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x80817BD: audiohook_read_frame_both (audiohook.c:252) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== ==5775== Invalid write of size 1 ==5775== at 0x40260BF: memcpy (mc_replace_strmem.c:482) ==5775== by 0x80DD513: ast_frdup (string3.h:52) ==5775== by 0x814E4E5: ast_slinfactory_feed (slinfactory.c:119) ==5775== by 0x8081C75: ast_audiohook_write_frame (audiohook.c:155) ==5775== by 0x80823A0: audio_audiohook_write_list (audiohook.c:604) ==5775== by 0x80A49F1: ast_write (channel.c:3517) ==5775== by 0x80A5F9E: ast_channel_bridge (channel.c:4900) ==5775== by 0x80CBEDF: ast_bridge_call (features.c:2585) ==5775== by 0x5670F68: dial_exec_full (app_dial.c:2258) ==5775== by 0x5673D9C: dial_exec (app_dial.c:2342) ==5775== by 0x8107584: pbx_exec (pbx.c:1348) ==5775== by 0x8116665: pbx_extension_helper (pbx.c:3708) ==5775== Address 0x74cb633 is 179 bytes inside a block of size 187 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x80817BD: audiohook_read_frame_both (audiohook.c:252) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== ==5775== Invalid write of size 1 ==5775== at 0x40260C7: memcpy (mc_replace_strmem.c:482) ==5775== by 0x80DD513: ast_frdup (string3.h:52) ==5775== by 0x814E4E5: ast_slinfactory_feed (slinfactory.c:119) ==5775== by 0x8081C75: ast_audiohook_write_frame (audiohook.c:155) ==5775== by 0x80823A0: audio_audiohook_write_list (audiohook.c:604) ==5775== by 0x80A49F1: ast_write (channel.c:3517) ==5775== by 0x80A5F9E: ast_channel_bridge (channel.c:4900) ==5775== by 0x80CBEDF: ast_bridge_call (features.c:2585) ==5775== by 0x5670F68: dial_exec_full (app_dial.c:2258) ==5775== by 0x5673D9C: dial_exec (app_dial.c:2342) ==5775== by 0x8107584: pbx_exec (pbx.c:1348) ==5775== by 0x8116665: pbx_extension_helper (pbx.c:3708) ==5775== Address 0x74cb632 is 178 bytes inside a block of size 187 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x80817BD: audiohook_read_frame_both (audiohook.c:252) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== ==5775== Invalid write of size 1 ==5775== at 0x40260D0: memcpy (mc_replace_strmem.c:482) ==5775== by 0x80DD513: ast_frdup (string3.h:52) ==5775== by 0x814E4E5: ast_slinfactory_feed (slinfactory.c:119) ==5775== by 0x8081C75: ast_audiohook_write_frame (audiohook.c:155) ==5775== by 0x80823A0: audio_audiohook_write_list (audiohook.c:604) ==5775== by 0x80A49F1: ast_write (channel.c:3517) ==5775== by 0x80A5F9E: ast_channel_bridge (channel.c:4900) ==5775== by 0x80CBEDF: ast_bridge_call (features.c:2585) ==5775== by 0x5670F68: dial_exec_full (app_dial.c:2258) ==5775== by 0x5673D9C: dial_exec (app_dial.c:2342) ==5775== by 0x8107584: pbx_exec (pbx.c:1348) ==5775== by 0x8116665: pbx_extension_helper (pbx.c:3708) ==5775== Address 0x74cb631 is 177 bytes inside a block of size 187 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x80817BD: audiohook_read_frame_both (audiohook.c:252) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== ==5775== Invalid write of size 1 ==5775== at 0x40260D9: memcpy (mc_replace_strmem.c:482) ==5775== by 0x80DD513: ast_frdup (string3.h:52) ==5775== by 0x814E4E5: ast_slinfactory_feed (slinfactory.c:119) ==5775== by 0x8081C75: ast_audiohook_write_frame (audiohook.c:155) ==5775== by 0x80823A0: audio_audiohook_write_list (audiohook.c:604) ==5775== by 0x80A49F1: ast_write (channel.c:3517) ==5775== by 0x80A5F9E: ast_channel_bridge (channel.c:4900) ==5775== by 0x80CBEDF: ast_bridge_call (features.c:2585) ==5775== by 0x5670F68: dial_exec_full (app_dial.c:2258) ==5775== by 0x5673D9C: dial_exec (app_dial.c:2342) ==5775== by 0x8107584: pbx_exec (pbx.c:1348) ==5775== by 0x8116665: pbx_extension_helper (pbx.c:3708) ==5775== Address 0x74cb630 is 176 bytes inside a block of size 187 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x80817BD: audiohook_read_frame_both (audiohook.c:252) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== ==5775== Invalid write of size 4 ==5775== at 0x80DD47F: ast_frdup (frame.c:534) ==5775== by 0x814E4E5: ast_slinfactory_feed (slinfactory.c:119) ==5775== by 0x8081C75: ast_audiohook_write_frame (audiohook.c:155) ==5775== by 0x80823A0: audio_audiohook_write_list (audiohook.c:604) ==5775== by 0x80A49F1: ast_write (channel.c:3517) ==5775== by 0x80A5F9E: ast_channel_bridge (channel.c:4900) ==5775== by 0x80CBEDF: ast_bridge_call (features.c:2585) ==5775== by 0x5670F68: dial_exec_full (app_dial.c:2258) ==5775== by 0x5673D9C: dial_exec (app_dial.c:2342) ==5775== by 0x8107584: pbx_exec (pbx.c:1348) ==5775== by 0x8116665: pbx_extension_helper (pbx.c:3708) ==5775== by 0x811B263: T.903 (pbx.c:4167) ==5775== Address 0x74cb59c is 28 bytes inside a block of size 187 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x80817BD: audiohook_read_frame_both (audiohook.c:252) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== ==5775== Invalid write of size 1 ==5775== at 0x4025C2B: strcpy (mc_replace_strmem.c:303) ==5775== by 0x80DD490: ast_frdup (string3.h:106) ==5775== by 0x814E4E5: ast_slinfactory_feed (slinfactory.c:119) ==5775== by 0x8081C75: ast_audiohook_write_frame (audiohook.c:155) ==5775== by 0x80823A0: audio_audiohook_write_list (audiohook.c:604) ==5775== by 0x80A49F1: ast_write (channel.c:3517) ==5775== by 0x80A5F9E: ast_channel_bridge (channel.c:4900) ==5775== by 0x80CBEDF: ast_bridge_call (features.c:2585) ==5775== by 0x5670F68: dial_exec_full (app_dial.c:2258) ==5775== by 0x5673D9C: dial_exec (app_dial.c:2342) ==5775== by 0x8107584: pbx_exec (pbx.c:1348) ==5775== by 0x8116665: pbx_extension_helper (pbx.c:3708) ==5775== Address 0x74cb634 is 180 bytes inside a block of size 187 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x80817BD: audiohook_read_frame_both (audiohook.c:252) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== ==5775== Invalid write of size 1 ==5775== at 0x4025C47: strcpy (mc_replace_strmem.c:303) ==5775== by 0x80DD490: ast_frdup (string3.h:106) ==5775== by 0x814E4E5: ast_slinfactory_feed (slinfactory.c:119) ==5775== by 0x8081C75: ast_audiohook_write_frame (audiohook.c:155) ==5775== by 0x80823A0: audio_audiohook_write_list (audiohook.c:604) ==5775== by 0x80A49F1: ast_write (channel.c:3517) ==5775== by 0x80A5F9E: ast_channel_bridge (channel.c:4900) ==5775== by 0x80CBEDF: ast_bridge_call (features.c:2585) ==5775== by 0x5670F68: dial_exec_full (app_dial.c:2258) ==5775== by 0x5673D9C: dial_exec (app_dial.c:2342) ==5775== by 0x8107584: pbx_exec (pbx.c:1348) ==5775== by 0x8116665: pbx_extension_helper (pbx.c:3708) ==5775== Address 0x74cb63a is 186 bytes inside a block of size 187 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x80817BD: audiohook_read_frame_both (audiohook.c:252) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== ==5775== Invalid read of size 4 ==5775== at 0x80DD491: ast_frdup (frame.c:539) ==5775== by 0x814E4E5: ast_slinfactory_feed (slinfactory.c:119) ==5775== by 0x8081C75: ast_audiohook_write_frame (audiohook.c:155) ==5775== by 0x80823A0: audio_audiohook_write_list (audiohook.c:604) ==5775== by 0x80A49F1: ast_write (channel.c:3517) ==5775== by 0x80A5F9E: ast_channel_bridge (channel.c:4900) ==5775== by 0x80CBEDF: ast_bridge_call (features.c:2585) ==5775== by 0x5670F68: dial_exec_full (app_dial.c:2258) ==5775== by 0x5673D9C: dial_exec (app_dial.c:2342) ==5775== by 0x8107584: pbx_exec (pbx.c:1348) ==5775== by 0x8116665: pbx_extension_helper (pbx.c:3708) ==5775== by 0x811B263: T.903 (pbx.c:4167) ==5775== Address 0x74cb5b4 is 52 bytes inside a block of size 187 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x80817BD: audiohook_read_frame_both (audiohook.c:252) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== ==5775== Invalid write of size 4 ==5775== at 0x80DD497: ast_frdup (frame.c:539) ==5775== by 0x814E4E5: ast_slinfactory_feed (slinfactory.c:119) ==5775== by 0x8081C75: ast_audiohook_write_frame (audiohook.c:155) ==5775== by 0x80823A0: audio_audiohook_write_list (audiohook.c:604) ==5775== by 0x80A49F1: ast_write (channel.c:3517) ==5775== by 0x80A5F9E: ast_channel_bridge (channel.c:4900) ==5775== by 0x80CBEDF: ast_bridge_call (features.c:2585) ==5775== by 0x5670F68: dial_exec_full (app_dial.c:2258) ==5775== by 0x5673D9C: dial_exec (app_dial.c:2342) ==5775== by 0x8107584: pbx_exec (pbx.c:1348) ==5775== by 0x8116665: pbx_extension_helper (pbx.c:3708) ==5775== by 0x811B263: T.903 (pbx.c:4167) ==5775== Address 0x74cb5b4 is 52 bytes inside a block of size 187 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x80817BD: audiohook_read_frame_both (audiohook.c:252) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== ==5775== Invalid write of size 4 ==5775== at 0x80DD4A2: ast_frdup (frame.c:539) ==5775== by 0x814E4E5: ast_slinfactory_feed (slinfactory.c:119) ==5775== by 0x8081C75: ast_audiohook_write_frame (audiohook.c:155) ==5775== by 0x80823A0: audio_audiohook_write_list (audiohook.c:604) ==5775== by 0x80A49F1: ast_write (channel.c:3517) ==5775== by 0x80A5F9E: ast_channel_bridge (channel.c:4900) ==5775== by 0x80CBEDF: ast_bridge_call (features.c:2585) ==5775== by 0x5670F68: dial_exec_full (app_dial.c:2258) ==5775== by 0x5673D9C: dial_exec (app_dial.c:2342) ==5775== by 0x8107584: pbx_exec (pbx.c:1348) ==5775== by 0x8116665: pbx_extension_helper (pbx.c:3708) ==5775== by 0x811B263: T.903 (pbx.c:4167) ==5775== Address 0x74cb5b4 is 52 bytes inside a block of size 187 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x80817BD: audiohook_read_frame_both (audiohook.c:252) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== ==5775== Invalid write of size 4 ==5775== at 0x80DD4A8: ast_frdup (frame.c:540) ==5775== by 0x814E4E5: ast_slinfactory_feed (slinfactory.c:119) ==5775== by 0x8081C75: ast_audiohook_write_frame (audiohook.c:155) ==5775== by 0x80823A0: audio_audiohook_write_list (audiohook.c:604) ==5775== by 0x80A49F1: ast_write (channel.c:3517) ==5775== by 0x80A5F9E: ast_channel_bridge (channel.c:4900) ==5775== by 0x80CBEDF: ast_bridge_call (features.c:2585) ==5775== by 0x5670F68: dial_exec_full (app_dial.c:2258) ==5775== by 0x5673D9C: dial_exec (app_dial.c:2342) ==5775== by 0x8107584: pbx_exec (pbx.c:1348) ==5775== by 0x8116665: pbx_extension_helper (pbx.c:3708) ==5775== by 0x811B263: T.903 (pbx.c:4167) ==5775== Address 0x74cb5b8 is 56 bytes inside a block of size 187 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x80817BD: audiohook_read_frame_both (audiohook.c:252) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== ==5775== Invalid write of size 4 ==5775== at 0x80DD4AE: ast_frdup (frame.c:541) ==5775== by 0x814E4E5: ast_slinfactory_feed (slinfactory.c:119) ==5775== by 0x8081C75: ast_audiohook_write_frame (audiohook.c:155) ==5775== by 0x80823A0: audio_audiohook_write_list (audiohook.c:604) ==5775== by 0x80A49F1: ast_write (channel.c:3517) ==5775== by 0x80A5F9E: ast_channel_bridge (channel.c:4900) ==5775== by 0x80CBEDF: ast_bridge_call (features.c:2585) ==5775== by 0x5670F68: dial_exec_full (app_dial.c:2258) ==5775== by 0x5673D9C: dial_exec (app_dial.c:2342) ==5775== by 0x8107584: pbx_exec (pbx.c:1348) ==5775== by 0x8116665: pbx_extension_helper (pbx.c:3708) ==5775== by 0x811B263: T.903 (pbx.c:4167) ==5775== Address 0x74cb5bc is 60 bytes inside a block of size 187 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x80817BD: audiohook_read_frame_both (audiohook.c:252) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== ==5775== Invalid write of size 4 ==5775== at 0x80DD4B4: ast_frdup (frame.c:542) ==5775== by 0x814E4E5: ast_slinfactory_feed (slinfactory.c:119) ==5775== by 0x8081C75: ast_audiohook_write_frame (audiohook.c:155) ==5775== by 0x80823A0: audio_audiohook_write_list (audiohook.c:604) ==5775== by 0x80A49F1: ast_write (channel.c:3517) ==5775== by 0x80A5F9E: ast_channel_bridge (channel.c:4900) ==5775== by 0x80CBEDF: ast_bridge_call (features.c:2585) ==5775== by 0x5670F68: dial_exec_full (app_dial.c:2258) ==5775== by 0x5673D9C: dial_exec (app_dial.c:2342) ==5775== by 0x8107584: pbx_exec (pbx.c:1348) ==5775== by 0x8116665: pbx_extension_helper (pbx.c:3708) ==5775== by 0x811B263: T.903 (pbx.c:4167) ==5775== Address 0x74cb5c0 is 64 bytes inside a block of size 187 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x80817BD: audiohook_read_frame_both (audiohook.c:252) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== ==5775== Invalid read of size 4 ==5775== at 0x814E4A9: ast_slinfactory_feed (slinfactory.c:132) ==5775== by 0x8081C75: ast_audiohook_write_frame (audiohook.c:155) ==5775== by 0x80823A0: audio_audiohook_write_list (audiohook.c:604) ==5775== by 0x80A49F1: ast_write (channel.c:3517) ==5775== by 0x80A5F9E: ast_channel_bridge (channel.c:4900) ==5775== by 0x80CBEDF: ast_bridge_call (features.c:2585) ==5775== by 0x5670F68: dial_exec_full (app_dial.c:2258) ==5775== by 0x5673D9C: dial_exec (app_dial.c:2342) ==5775== by 0x8107584: pbx_exec (pbx.c:1348) ==5775== by 0x8116665: pbx_extension_helper (pbx.c:3708) ==5775== by 0x811B263: T.903 (pbx.c:4167) ==5775== by 0x811CD2D: pbx_thread (pbx.c:4544) ==5775== Address 0x74cb58c is 12 bytes inside a block of size 187 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x80817BD: audiohook_read_frame_both (audiohook.c:252) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== ==5775== Invalid read of size 4 ==5775== at 0x814E4AC: ast_slinfactory_feed (slinfactory.c:130) ==5775== by 0x8081C75: ast_audiohook_write_frame (audiohook.c:155) ==5775== by 0x80823A0: audio_audiohook_write_list (audiohook.c:604) ==5775== by 0x80A49F1: ast_write (channel.c:3517) ==5775== by 0x80A5F9E: ast_channel_bridge (channel.c:4900) ==5775== by 0x80CBEDF: ast_bridge_call (features.c:2585) ==5775== by 0x5670F68: dial_exec_full (app_dial.c:2258) ==5775== by 0x5673D9C: dial_exec (app_dial.c:2342) ==5775== by 0x8107584: pbx_exec (pbx.c:1348) ==5775== by 0x8116665: pbx_extension_helper (pbx.c:3708) ==5775== by 0x811B263: T.903 (pbx.c:4167) ==5775== by 0x811CD2D: pbx_thread (pbx.c:4544) ==5775== Address 0x74cb5b0 is 48 bytes inside a block of size 187 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x80817BD: audiohook_read_frame_both (audiohook.c:252) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== ==5775== Invalid read of size 4 ==5775== at 0x814E488: ast_slinfactory_feed (slinfactory.c:123) ==5775== by 0x8081C75: ast_audiohook_write_frame (audiohook.c:155) ==5775== by 0x80823A0: audio_audiohook_write_list (audiohook.c:604) ==5775== by 0x80A49F1: ast_write (channel.c:3517) ==5775== by 0x80A5F9E: ast_channel_bridge (channel.c:4900) ==5775== by 0x80CBEDF: ast_bridge_call (features.c:2585) ==5775== by 0x5670F68: dial_exec_full (app_dial.c:2258) ==5775== by 0x5673D9C: dial_exec (app_dial.c:2342) ==5775== by 0x8107584: pbx_exec (pbx.c:1348) ==5775== by 0x8116665: pbx_extension_helper (pbx.c:3708) ==5775== by 0x811B263: T.903 (pbx.c:4167) ==5775== by 0x811CD2D: pbx_thread (pbx.c:4544) ==5775== Address 0x74cb5b0 is 48 bytes inside a block of size 187 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x80817BD: audiohook_read_frame_both (audiohook.c:252) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== ==5775== Invalid write of size 4 ==5775== at 0x814E4A3: ast_slinfactory_feed (slinfactory.c:131) ==5775== by 0x8081C75: ast_audiohook_write_frame (audiohook.c:155) ==5775== by 0x80823A0: audio_audiohook_write_list (audiohook.c:604) ==5775== by 0x80A49F1: ast_write (channel.c:3517) ==5775== by 0x80A5F9E: ast_channel_bridge (channel.c:4900) ==5775== by 0x80CBEDF: ast_bridge_call (features.c:2585) ==5775== by 0x5670F68: dial_exec_full (app_dial.c:2258) ==5775== by 0x5673D9C: dial_exec (app_dial.c:2342) ==5775== by 0x8107584: pbx_exec (pbx.c:1348) ==5775== by 0x8116665: pbx_extension_helper (pbx.c:3708) ==5775== by 0x811B263: T.903 (pbx.c:4167) ==5775== by 0x811CD2D: pbx_thread (pbx.c:4544) ==5775== Address 0x74cb5b0 is 48 bytes inside a block of size 187 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x80817BD: audiohook_read_frame_both (audiohook.c:252) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== ==5775== Invalid read of size 4 ==5775== at 0x814E128: ast_slinfactory_flush (slinfactory.c:206) ==5775== by 0x8081D6B: ast_audiohook_write_frame (audiohook.c:143) ==5775== by 0x80823A0: audio_audiohook_write_list (audiohook.c:604) ==5775== by 0x80A0ED4: __ast_read (channel.c:2968) ==5775== by 0x80A5C08: ast_channel_bridge (channel.c:3070) ==5775== by 0x80CBEDF: ast_bridge_call (features.c:2585) ==5775== by 0x5670F68: dial_exec_full (app_dial.c:2258) ==5775== by 0x5673D9C: dial_exec (app_dial.c:2342) ==5775== by 0x8107584: pbx_exec (pbx.c:1348) ==5775== by 0x8116665: pbx_extension_helper (pbx.c:3708) ==5775== by 0x811B263: T.903 (pbx.c:4167) ==5775== by 0x811CD2D: pbx_thread (pbx.c:4544) ==5775== Address 0x74cb5b0 is 48 bytes inside a block of size 187 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x80817BD: audiohook_read_frame_both (audiohook.c:252) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== ==5775== Invalid write of size 4 ==5775== at 0x814E12D: ast_slinfactory_flush (slinfactory.c:206) ==5775== by 0x8081D6B: ast_audiohook_write_frame (audiohook.c:143) ==5775== by 0x80823A0: audio_audiohook_write_list (audiohook.c:604) ==5775== by 0x80A0ED4: __ast_read (channel.c:2968) ==5775== by 0x80A5C08: ast_channel_bridge (channel.c:3070) ==5775== by 0x80CBEDF: ast_bridge_call (features.c:2585) ==5775== by 0x5670F68: dial_exec_full (app_dial.c:2258) ==5775== by 0x5673D9C: dial_exec (app_dial.c:2342) ==5775== by 0x8107584: pbx_exec (pbx.c:1348) ==5775== by 0x8116665: pbx_extension_helper (pbx.c:3708) ==5775== by 0x811B263: T.903 (pbx.c:4167) ==5775== by 0x811CD2D: pbx_thread (pbx.c:4544) ==5775== Address 0x74cb5b0 is 48 bytes inside a block of size 187 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x80817BD: audiohook_read_frame_both (audiohook.c:252) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== ==5775== Invalid read of size 4 ==5775== at 0x80DD9DF: ast_frame_free (frame.c:377) ==5775== by 0x814E148: ast_slinfactory_flush (slinfactory.c:207) ==5775== by 0x8081D6B: ast_audiohook_write_frame (audiohook.c:143) ==5775== by 0x80823A0: audio_audiohook_write_list (audiohook.c:604) ==5775== by 0x80A0ED4: __ast_read (channel.c:2968) ==5775== by 0x80A5C08: ast_channel_bridge (channel.c:3070) ==5775== by 0x80CBEDF: ast_bridge_call (features.c:2585) ==5775== by 0x5670F68: dial_exec_full (app_dial.c:2258) ==5775== by 0x5673D9C: dial_exec (app_dial.c:2342) ==5775== by 0x8107584: pbx_exec (pbx.c:1348) ==5775== by 0x8116665: pbx_extension_helper (pbx.c:3708) ==5775== by 0x811B263: T.903 (pbx.c:4167) ==5775== Address 0x74cb5b0 is 48 bytes inside a block of size 187 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x80817BD: audiohook_read_frame_both (audiohook.c:252) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== ==5775== Invalid read of size 4 ==5775== at 0x80DDA42: ast_frame_free (frame.c:335) ==5775== by 0x814E148: ast_slinfactory_flush (slinfactory.c:207) ==5775== by 0x8081D6B: ast_audiohook_write_frame (audiohook.c:143) ==5775== by 0x80823A0: audio_audiohook_write_list (audiohook.c:604) ==5775== by 0x80A0ED4: __ast_read (channel.c:2968) ==5775== by 0x80A5C08: ast_channel_bridge (channel.c:3070) ==5775== by 0x80CBEDF: ast_bridge_call (features.c:2585) ==5775== by 0x5670F68: dial_exec_full (app_dial.c:2258) ==5775== by 0x5673D9C: dial_exec (app_dial.c:2342) ==5775== by 0x8107584: pbx_exec (pbx.c:1348) ==5775== by 0x8116665: pbx_extension_helper (pbx.c:3708) ==5775== by 0x811B263: T.903 (pbx.c:4167) ==5775== Address 0x74cb5b4 is 52 bytes inside a block of size 187 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x80817BD: audiohook_read_frame_both (audiohook.c:252) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== ==5775== Invalid read of size 4 ==5775== at 0x80DD9EC: ast_frame_free (frame.c:341) ==5775== by 0x814E148: ast_slinfactory_flush (slinfactory.c:207) ==5775== by 0x8081D6B: ast_audiohook_write_frame (audiohook.c:143) ==5775== by 0x80823A0: audio_audiohook_write_list (audiohook.c:604) ==5775== by 0x80A0ED4: __ast_read (channel.c:2968) ==5775== by 0x80A5C08: ast_channel_bridge (channel.c:3070) ==5775== by 0x80CBEDF: ast_bridge_call (features.c:2585) ==5775== by 0x5670F68: dial_exec_full (app_dial.c:2258) ==5775== by 0x5673D9C: dial_exec (app_dial.c:2342) ==5775== by 0x8107584: pbx_exec (pbx.c:1348) ==5775== by 0x8116665: pbx_extension_helper (pbx.c:3708) ==5775== by 0x811B263: T.903 (pbx.c:4167) ==5775== Address 0x74cb590 is 16 bytes inside a block of size 187 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x80817BD: audiohook_read_frame_both (audiohook.c:252) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== ==5775== Invalid read of size 4 ==5775== at 0x80DDAF8: ast_frame_free (frame.c:382) ==5775== by 0x814E148: ast_slinfactory_flush (slinfactory.c:207) ==5775== by 0x8081D6B: ast_audiohook_write_frame (audiohook.c:143) ==5775== by 0x80823A0: audio_audiohook_write_list (audiohook.c:604) ==5775== by 0x80A0ED4: __ast_read (channel.c:2968) ==5775== by 0x80A5C08: ast_channel_bridge (channel.c:3070) ==5775== by 0x80CBEDF: ast_bridge_call (features.c:2585) ==5775== by 0x5670F68: dial_exec_full (app_dial.c:2258) ==5775== by 0x5673D9C: dial_exec (app_dial.c:2342) ==5775== by 0x8107584: pbx_exec (pbx.c:1348) ==5775== by 0x8116665: pbx_extension_helper (pbx.c:3708) ==5775== by 0x811B263: T.903 (pbx.c:4167) ==5775== Address 0x74cb590 is 16 bytes inside a block of size 187 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x80817BD: audiohook_read_frame_both (audiohook.c:252) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== ==5775== Invalid free() / delete / delete[] ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E148: ast_slinfactory_flush (slinfactory.c:207) ==5775== by 0x8081D6B: ast_audiohook_write_frame (audiohook.c:143) ==5775== by 0x80823A0: audio_audiohook_write_list (audiohook.c:604) ==5775== by 0x80A0ED4: __ast_read (channel.c:2968) ==5775== by 0x80A5C08: ast_channel_bridge (channel.c:3070) ==5775== by 0x80CBEDF: ast_bridge_call (features.c:2585) ==5775== by 0x5670F68: dial_exec_full (app_dial.c:2258) ==5775== by 0x5673D9C: dial_exec (app_dial.c:2342) ==5775== by 0x8107584: pbx_exec (pbx.c:1348) ==5775== by 0x8116665: pbx_extension_helper (pbx.c:3708) ==5775== Address 0x74cb580 is 0 bytes inside a block of size 187 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x80817BD: audiohook_read_frame_both (audiohook.c:252) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== ==5775== Thread 46: ==5775== Invalid read of size 4 ==5775== at 0x814E28E: ast_slinfactory_read (slinfactory.c:164) ==5775== by 0x80817BD: audiohook_read_frame_both (audiohook.c:252) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== Address 0x74de870 is 48 bytes inside a block of size 187 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x8081442: audiohook_read_frame_both (audiohook.c:233) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== ==5775== Invalid write of size 4 ==5775== at 0x814E293: ast_slinfactory_read (slinfactory.c:164) ==5775== by 0x80817BD: audiohook_read_frame_both (audiohook.c:252) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== Address 0x74de870 is 48 bytes inside a block of size 187 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x8081442: audiohook_read_frame_both (audiohook.c:233) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== ==5775== Invalid read of size 4 ==5775== at 0x814E2A3: ast_slinfactory_read (slinfactory.c:167) ==5775== by 0x80817BD: audiohook_read_frame_both (audiohook.c:252) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== Address 0x74de84c is 12 bytes inside a block of size 187 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x8081442: audiohook_read_frame_both (audiohook.c:233) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== ==5775== Invalid read of size 4 ==5775== at 0x814E2A6: ast_slinfactory_read (slinfactory.c:165) ==5775== by 0x80817BD: audiohook_read_frame_both (audiohook.c:252) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== Address 0x74de860 is 32 bytes inside a block of size 187 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x8081442: audiohook_read_frame_both (audiohook.c:233) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== ==5775== Invalid read of size 1 ==5775== at 0x4026180: memcpy (mc_replace_strmem.c:482) ==5775== by 0x814E2C5: ast_slinfactory_read (string3.h:52) ==5775== by 0x80817BD: audiohook_read_frame_both (audiohook.c:252) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== Address 0x74de8c4 is 132 bytes inside a block of size 187 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x8081442: audiohook_read_frame_both (audiohook.c:233) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== ==5775== Invalid read of size 1 ==5775== at 0x4026187: memcpy (mc_replace_strmem.c:482) ==5775== by 0x814E2C5: ast_slinfactory_read (string3.h:52) ==5775== by 0x80817BD: audiohook_read_frame_both (audiohook.c:252) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== Address 0x74de8c5 is 133 bytes inside a block of size 187 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x8081442: audiohook_read_frame_both (audiohook.c:233) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== ==5775== Invalid read of size 1 ==5775== at 0x4026190: memcpy (mc_replace_strmem.c:482) ==5775== by 0x814E2C5: ast_slinfactory_read (string3.h:52) ==5775== by 0x80817BD: audiohook_read_frame_both (audiohook.c:252) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== Address 0x74de8c6 is 134 bytes inside a block of size 187 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x8081442: audiohook_read_frame_both (audiohook.c:233) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== ==5775== Invalid read of size 1 ==5775== at 0x4026199: memcpy (mc_replace_strmem.c:482) ==5775== by 0x814E2C5: ast_slinfactory_read (string3.h:52) ==5775== by 0x80817BD: audiohook_read_frame_both (audiohook.c:252) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== Address 0x74de8c7 is 135 bytes inside a block of size 187 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x8081442: audiohook_read_frame_both (audiohook.c:233) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== ==5775== Invalid read of size 4 ==5775== at 0x814E2C6: ast_slinfactory_read (slinfactory.c:169) ==5775== by 0x80817BD: audiohook_read_frame_both (audiohook.c:252) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== Address 0x74de84c is 12 bytes inside a block of size 187 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x8081442: audiohook_read_frame_both (audiohook.c:233) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== ==5775== Invalid read of size 4 ==5775== at 0x80DD9DF: ast_frame_free (frame.c:377) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x80817BD: audiohook_read_frame_both (audiohook.c:252) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== Address 0x74de870 is 48 bytes inside a block of size 187 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x8081442: audiohook_read_frame_both (audiohook.c:233) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== ==5775== Invalid read of size 4 ==5775== at 0x80DDA42: ast_frame_free (frame.c:335) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x80817BD: audiohook_read_frame_both (audiohook.c:252) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== Address 0x74de874 is 52 bytes inside a block of size 187 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x8081442: audiohook_read_frame_both (audiohook.c:233) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== ==5775== Invalid read of size 4 ==5775== at 0x80DD9EC: ast_frame_free (frame.c:341) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x80817BD: audiohook_read_frame_both (audiohook.c:252) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== Address 0x74de850 is 16 bytes inside a block of size 187 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x8081442: audiohook_read_frame_both (audiohook.c:233) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== ==5775== Invalid read of size 4 ==5775== at 0x80DDAF8: ast_frame_free (frame.c:382) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x80817BD: audiohook_read_frame_both (audiohook.c:252) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== Address 0x74de850 is 16 bytes inside a block of size 187 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x8081442: audiohook_read_frame_both (audiohook.c:233) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== ==5775== Invalid free() / delete / delete[] ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x80817BD: audiohook_read_frame_both (audiohook.c:252) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== Address 0x74de840 is 0 bytes inside a block of size 187 free'd ==5775== at 0x4024836: free (vg_replace_malloc.c:325) ==5775== by 0x80DDA38: ast_frame_free (frame.c:368) ==5775== by 0x814E2E3: ast_slinfactory_read (slinfactory.c:182) ==5775== by 0x8081442: audiohook_read_frame_both (audiohook.c:233) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== ==5775== Conditional jump or move depends on uninitialised value(s) ==5775== at 0x8081939: audiohook_read_frame_both (utils.h:271) ==5775== by 0x8081B96: ast_audiohook_read_frame (audiohook.c:299) ==5775== by 0x579AB72: mixmonitor_thread (app_mixmonitor.c:302) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== ==5775== Syscall param write(buf) points to uninitialised byte(s) ==5775== at 0x42AEF4B: ??? (in /lib/tls/i686/cmov/libc-2.10.1.so) ==5775== by 0x425892E: new_do_write (fileops.c:529) ==5775== by 0x4258C15: _IO_do_write@@GLIBC_2.1 (fileops.c:502) ==5775== by 0x425972C: _IO_file_overflow@@GLIBC_2.1 (fileops.c:880) ==5775== by 0x4258A77: _IO_file_xsputn@@GLIBC_2.1 (fileops.c:1357) ==5775== by 0x424E869: fwrite (iofwrite.c:45) ==5775== by 0x57BA9F9: wav_write (format_wav.c:420) ==5775== by 0x80DABFE: ast_writestream (file.c:169) ==5775== by 0x579ABEE: mixmonitor_thread (app_mixmonitor.c:332) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775== Address 0x6cb7948 is 28,384 bytes inside a block of size 32,768 alloc'd ==5775== at 0x4024C1C: malloc (vg_replace_malloc.c:195) ==5775== by 0x80DA6A5: ast_writefile (utils.h:434) ==5775== by 0x579AE7C: mixmonitor_thread (app_mixmonitor.c:321) ==5775== by 0x815FFDA: dummy_start (utils.c:968) ==5775== by 0x446880D: start_thread (pthread_create.c:300) ==5775== by 0x42BE7ED: clone (clone.S:130) ==5775==