Merged revisions 219519 via svnmerge from
authorDavid Vossel <dvossel@digium.com>
Fri, 18 Sep 2009 23:20:58 +0000 (23:20 +0000)
committerDavid Vossel <dvossel@digium.com>
Fri, 18 Sep 2009 23:20:58 +0000 (23:20 +0000)
commit95be40493a14ba6305dc2d10e63fb0d63d1b13a7
treece982f46baac8e1a815dec033a7590bad6917fb6
parente85e39899faf44b5659cf9ad01b19b014729032f
Merged revisions 219519 via svnmerge from
https://origsvn.digium.com/svn/asterisk/branches/1.4

........
  r219519 | dvossel | 2009-09-18 18:19:50 -0500 (Fri, 18 Sep 2009) | 9 lines

  iax2 frame double free

  The iax frame's retrans sched id was written over right
  before iax2_frame_free was called.  In iax2_frame_free that
  retrans id is used to delete the sched item.  By writing over
  the retrans field before the sched item could be deleted, it was
  possible for a retransmit to occur on a freed frame.
........

git-svn-id: https://origsvn.digium.com/svn/asterisk/trunk@219520 65c4cc65-6c06-0410-ace0-fbb531ad65f3
channels/chan_iax2.c