(gdb) bt
#0  0x0000003dd1a32885 in raise (sig=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
#1  0x0000003dd1a34065 in abort () at abort.c:92
#2  0x0000003dd1a6f977 in __libc_message (do_abort=2, 
    fmt=0x3dd1b551a0 "*** glibc detected *** %s: %s: 0x%s ***\n")
    at ../sysdeps/unix/sysv/linux/libc_fatal.c:198
#3  0x0000003dd1a75296 in malloc_printerr (action=3, 
    str=0x3dd1b532dd "malloc(): memory corruption", ptr=<value optimized out>)
    at malloc.c:6295
#4  0x0000003dd1a78b58 in _int_malloc (av=0x7f8bc0000020, bytes=<value optimized out>)
    at malloc.c:4402
#5  0x0000003dd1a79476 in __libc_calloc (n=<value optimized out>, 
    elem_size=<value optimized out>) at malloc.c:4071
#6  0x000000000044f644 in _ast_calloc ()
    at /usr/src/debug/asterisk-1.8.20.0/include/asterisk/utils.h:480
#7  ast_cdr_alloc () at cdr.c:501
#8  0x0000000000450ea5 in ast_cdr_dup (cdr=0x7f8bc0ec3930) at cdr.c:217
#9  0x0000000000451ac9 in ast_cdr_dup_unique_swap (cdr=0x7f8bc0ec3930) at cdr.c:200
#10 0x000000000049b5e0 in ast_bridge_call (chan=0x7f8ca0254d48, peer=0x7f8ca007ca78, 
    config=0x7f8ca01de090) at features.c:4030
#11 0x000000000049d573 in bridge_call_thread (data=0x7f8ca01de090) at features.c:996
#12 0x000000000051db68 in dummy_start (data=<value optimized out>) at utils.c:1010
#13 0x0000003dd1e077f1 in start_thread (arg=0x7f8ab1f8b700) at pthread_create.c:301
#14 0x0000003dd1ae5ccd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115
(gdb) bt full
#0  0x0000003dd1a32885 in raise (sig=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
        resultvar = 0
        pid = 16074
        selftid = 16651
#1  0x0000003dd1a34065 in abort () at abort.c:92
        save_stage = 2
        act = {__sigaction_handler = {sa_handler = 0x7f8ab1f89f18, 
            sa_sigaction = 0x7f8ab1f89f18}, sa_mask = {__val = {140233668075264, 
              140242835255264, 16, 265511314762, 1, 265510009738, 5, 265511318421, 3, 
              140233668075262, 2, 265511314788, 1, 265511321504, 3, 140233668075270}}, 
          sa_flags = 10, sa_restorer = 0x3dd1b53fa4}
        sigs = {__val = {32, 0 <repeats 15 times>}}
#2  0x0000003dd1a6f977 in __libc_message (do_abort=2, 
    fmt=0x3dd1b551a0 "*** glibc detected *** %s: %s: 0x%s ***\n")
    at ../sysdeps/unix/sysv/linux/libc_fatal.c:198
        ap = {{gp_offset = 40, fp_offset = 48, overflow_arg_area = 0x7f8ab1f8a880, 
            reg_save_area = 0x7f8ab1f8a790}}
        ap_copy = {{gp_offset = 16, fp_offset = 48, overflow_arg_area = 0x7f8ab1f8a880, 
            reg_save_area = 0x7f8ab1f8a790}}
        fd = 2
        on_2 = <value optimized out>
        list = <value optimized out>
        nlist = <value optimized out>
        cp = <value optimized out>
        written = <value optimized out>
#3  0x0000003dd1a75296 in malloc_printerr (action=3, 
    str=0x3dd1b532dd "malloc(): memory corruption", ptr=<value optimized out>)
    at malloc.c:6295
        buf = "00007f8ca4069010"
        cp = <value optimized out>
#4  0x0000003dd1a78b58 in _int_malloc (av=0x7f8bc0000020, bytes=<value optimized out>)
    at malloc.c:4402
        iters = <value optimized out>
        nb = 1248
        idx = <value optimized out>
        bin = <value optimized out>
        victim = 0x7f8ca4069000
        size = <value optimized out>
        victim_index = <value optimized out>
        remainder = <value optimized out>
        remainder_size = <value optimized out>
        block = <value optimized out>
        bit = <value optimized out>
        map = <value optimized out>
        fwd = <value optimized out>
        bck = <value optimized out>
        errstr = 0x0
#5  0x0000003dd1a79476 in __libc_calloc (n=<value optimized out>, 
    elem_size=<value optimized out>) at malloc.c:4071
        av = 0x7f8bc0000020
        oldtop = 0x7f8bc1ab2460
        p = <value optimized out>
        bytes = 1232
        sz = 1232
        csz = <value optimized out>
        oldtopsize = 236448
        mem = <value optimized out>
        clearsize = <value optimized out>
        nclears = <value optimized out>
        d = <value optimized out>
        hook = <value optimized out>
#6  0x000000000044f644 in _ast_calloc ()
    at /usr/src/debug/asterisk-1.8.20.0/include/asterisk/utils.h:480
No locals.
#7  ast_cdr_alloc () at cdr.c:501
        __PRETTY_FUNCTION__ = "ast_cdr_alloc"
#8  0x0000000000450ea5 in ast_cdr_dup (cdr=0x7f8bc0ec3930) at cdr.c:217
        newcdr = <value optimized out>
#9  0x0000000000451ac9 in ast_cdr_dup_unique_swap (cdr=0x7f8bc0ec3930) at cdr.c:200
        newcdr = 0x0
#10 0x000000000049b5e0 in ast_bridge_call (chan=0x7f8ca0254d48, peer=0x7f8ca007ca78, 
    config=0x7f8ca01de090) at features.c:4030
        f = <value optimized out>
        who = <value optimized out>
        chan_featurecode = '\000' <repeats 11 times>
        peer_featurecode = '\000' <repeats 11 times>
        orig_channame = "Local/1020557492@agent-0003823a;1\000U\000\000\000\000\000 x~\301\213\177\000\000\034\000\000\000\000\000\000\000 \000\000\300\213\177\000\000\300\271\370\261\212\177\000\000\000\000\000\000\000\000\000"
        orig_peername = "SIP/callBalancer01-000962c5\000\000\000\000\000\342\235\n\240\214\177\000\000\000\000\000\000\000\000\000\000\240\233\003\000\000\000\000\000`$\253\301\213\177\000\000(\000\000\000\000\000\000\000 \000\000\300\213\177\000"
        res = <value optimized out>
        hasfeatures = 0
        hadfeatures = 0
        autoloopflag = <value optimized out>
        sendingdtmfdigit = 0
        we_disabled_peer_cdr = 0
        aoh = <value optimized out>
        bridge_cdr = 0x0
        chan_cdr = 0x7f8bc0ec3930
        peer_cdr = 0x7f8c780203f0
        new_chan_cdr = 0x0
        new_peer_cdr = 0x0
        silgen = 0x0
        h_context = <value optimized out>
        __PRETTY_FUNCTION__ = "ast_bridge_call"
#11 0x000000000049d573 in bridge_call_thread (data=0x7f8ca01de090) at features.c:996
        tobj = 0x7f8ca01de090
        __PRETTY_FUNCTION__ = "bridge_call_thread"
#12 0x000000000051db68 in dummy_start (data=<value optimized out>) at utils.c:1010
        __clframe = {__cancel_routine = <value optimized out>, 
          __cancel_arg = 0x7f8ab1f8b700, __do_it = 1, __cancel_type = 0}
        ret = <value optimized out>
        a = {start_routine = 0x49d4e0 <bridge_call_thread>, data = 0x7f8ca01de090, 
          name = <value optimized out>}
#13 0x0000003dd1e077f1 in start_thread (arg=0x7f8ab1f8b700) at pthread_create.c:301
        __res = <value optimized out>
        pd = 0x7f8ab1f8b700
        now = <value optimized out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140233668081408, 5743828511906984048, 
                140242583555648, 140233668082112, 0, 3, -5718640892525809552, 
                5750408814701178992}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 
              0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = <value optimized out>
        pagesize_m1 = <value optimized out>
        sp = <value optimized out>
        freesize = <value optimized out>
#14 0x0000003dd1ae5ccd in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115
No locals.