From: Chris Rienzo <chris.rienzo@citrix.com>
Date: Fri, 23 Oct 2015 03:03:15 +0000 (-0400)
Subject: FS-8370 [mod_rayo] found another place in <prompt> where a message was freed after... 
X-Git-Tag: v1.4.26~8
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=61b8e6ee66d54a798d874337838290ab4ef981d3;p=thirdparty%2Ffreeswitch.git

FS-8370 [mod_rayo] found another place in <prompt> where a message was freed after being queued for delivery. This resulted in a freed object being serialized, crashing FS.
---

diff --git a/src/mod/event_handlers/mod_rayo/rayo_prompt_component.c b/src/mod/event_handlers/mod_rayo/rayo_prompt_component.c
index 720a164d30..15add81d79 100644
--- a/src/mod/event_handlers/mod_rayo/rayo_prompt_component.c
+++ b/src/mod/event_handlers/mod_rayo/rayo_prompt_component.c
@@ -288,7 +288,7 @@ static iks *prompt_component_handle_input_error(struct rayo_actor *prompt, struc
 			RAYO_SEND_REPLY(prompt, RAYO_COMPONENT(prompt)->client_jid, iq);
 
 			/* done */
-			iks_delete(PROMPT_COMPONENT(prompt)->iq);
+			PROMPT_COMPONENT(prompt)->iq = NULL;
 			RAYO_RELEASE(prompt);
 			RAYO_DESTROY(prompt);