tm: fix transaction leakage when receiving replicated CANCELs

(cherry picked from commit 82b8d20)

modules/tm/cluster.c

@@ -36,6 +36,8 @@ static str tm_repl_cap = str_init("tm-repl");
 
 struct clusterer_binds cluster_api;
 
+int do_t_cleanup( struct sip_msg *req, void *bar);
+
 #define TM_BIN_POP(_t, _f, _d) \
 	do { \
 		if (bin_pop_##_t(packet, _f) < 0) { \
@@ -142,7 +144,7 @@ static void tm_repl_cancel(bin_packet_t *packet, str *buf, struct receive_info *
 			tmp = ip_addr2a(&(ri->src_ip));
 			LM_ERR("Unable to parse replicated CANCEL received from [%s:%d]\n",
 				tmp, ri->src_port);
-			return;
+			goto cleanup;
 		}
 	}
 
@@ -152,6 +154,8 @@ static void tm_repl_cancel(bin_packet_t *packet, str *buf, struct receive_info *
 	else
 		LM_ERR("cannot handle auto-CANCEL for %p!\n", t);
 
+cleanup:
+	do_t_cleanup(&msg, NULL);
 	free_sip_msg(&msg);
 }
 

modules/tm/tm.c

@@ -667,7 +667,7 @@ int load_tm( struct tm_binds *tmb)
 }
 
 
-static int do_t_cleanup( struct sip_msg *req, void *bar)
+int do_t_cleanup( struct sip_msg *req, void *bar)
 {
 	struct cell *t;