[Asterisk-Dev] Speex problems w/1.0.6

[I put the Who? in Mishehu]

Hi everybody.

I've been consistently having problems with Speex for a while now.  
Streams are fine as long as they are IAX2-to-IAX2 or 
SIP/speex-to-IAX2/speex.  If I do SIP/g711ulaw-to-IAX2/speex, I get 
terribly chopped up audio, and if I do SIP/speex-to-IAX2/g711ulaw, 
asterisk crashes.

I've tried both Speex 1.0.4 and 1.1.6 (1.0.4 seems to work sometimes, 
whereas 1.1.6 seems to be just that - unstable).  Here are my bt full's 
on the core dump:

Speex 1.1.6:
#1200 0x0806294b in ast_translate (path=0x818ff3c, f=0x8192b80,
    consume=135858492) at translate.c:189
        p = (struct ast_trans_pvt *) 0x8192b80
        out = (struct ast_frame *) 0xb768cad0
        delivery = {tv_sec = 775043377, tv_usec = 135868916}
Previous frame inner to this frame (corrupt stack?)

Speex 1.0.4:
#2028 0x0807ca43 in pbx_extension_helper (c=0x15e0,
    context=0x7f7f7f7f <Address 0x7f7f7f7f out of bounds>,
    exten=0x7e7e7e7f <Address 0x7e7e7e7f out of bounds>, 
priority=2138996350,
    callerid=0xffff7f7f <Address 0xffff7f7f out of bounds>, 
action=-1217075152)
    at pbx.c:1288
        e = (struct ast_exten *) 0xbdbf4d8c
        sw = (struct ast_switch *) 0xbdbf1bb4
        data = 0xb7f8fbea <Address 0xb7f8fbea out of bounds>
        newstack = -1208386624
        res = -16843010
        status = 7
        incstack = {0x7fff7f7f <Address 0x7fff7f7f out of bounds>,
  0xfeffffff <Address 0xfeffffff out of bounds>,
  0xfefefefe <Address 0xfefefefe out of bounds>,
<snip snip, lots of this repeated>
        passdata = 
"192.168.200.1\000\000\000K*ðBøà\002Bv×\216@\f\006î·\034M¿½\004\016\000\000\204<¿½ôrà·,Q¿½\004\016\000\000éæ[·\230<¿½rE¿½p(\\·äL¿½U\235Y·\020&\021\b\004\016\000\000éæ[·\\A¿½|L¿½L=¿½tûO½\0008Ľ\r\023^;¨!m;ù@`<Ãè[·\r9Ü:«Ù\234¸\206|\177º\t\000\000\000o`¿½\000\000\000\000\000\000\000\000\n", 
'\0' <repeats 11 times>, "Ä®µ·|L¿½ 
ý\020\b\\A¿½\000\000\000\000l=¿½\\E¿½\\F¿½\\"...
        stacklen = -1209133172
        tmp = 
"<<¿½èLí·\024<¿½\234<¿½«£ÅB\200Ùí·\000\000\000\000\006Òé·L=¿½<<¿½¥\000\000\000¨\000\000\000È\000\000\000\001\000\000\000{=¿Á4=â·", 
'\0' <repeats 12 times>, "L=¿½"
        tmp2 = '\0' <repeats 28 times>, 
"\n\000\000\000\000\000\000\000 ßí·\000\000\000\000ÿÿÿÿ", '\0' <repeats 
12 times>, "\f\006î·\020\000\000\000<<¿½\004<¿½-sà·"
        tmp3 = 
"\234\027î·\000\000\000\000\200\220\017\b\f\006î·\f\006î·aní·Ä\033¿½¥¾ä·\000\000\000\000Ù@¿½D\035¿½ã4å·Ù@¿½&\035¿½\002\000\000\000\f\006î·\000\000\000\000\000\000\000\000ÿÿÿÿiní·\000\000\000\000\002\000\000\000\000\000\000\000öÿÿÿû?¿½\b\000\000\000\200\220\017\b\002\000\000\000\002\000\000\000ù\000\000\000\000\000\000\000\214@¿½", 
'\0' <repeats 12 times>, 
"¥{ù·\214\027î·ì@¿½T\034¿½/ÿÝ·­\177í·\000\000\000\000\000\000244=â·\f\006î·TZ\000\000\000\000\000\000\f\006î·\000\000\000\000\000\000\000\000ÿÿ"...
Previous frame inner to this frame (corrupt stack?)

This is on a Dual-proc Xeon 2.8GHz/800MHz FSB machine, 1 GB ECC REG ram, 
3ware 9500 SATA Raid, X101P (from digium), running Slackware 10.0.  This 
is a problem I've had consistently since I first attempted Speex on 
Asterisk 1.0.2, but only now was able to produce any info out of the 
core dumps.  If you need any further information, please let me know.  
Any assistance is appreciated.  I hope I'm not barking up the wrong 
mailing list, as this appeared to be a problem that developers would be 
in a better position to look into rather than the general users.

-Mishehu