tm: use relayed_code for active type check in TMCB RESPONSE OUT

- relayed_msg can be a fake reply and accessing the status field causes a crash (issue introduced by previous patch)
kamailio · Nov 10, 2017 · 2a80ed8 · 2a80ed8
1 parent 313265a
commit 2a80ed8
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/modules/tm/t_reply.c b/src/modules/tm/t_reply.c
@@ -1978,7 +1978,7 @@ enum rps relay_reply( struct cell *t, struct sip_msg *p_msg, int branch,
 				if (unlikely(!totag_retr
 							&& has_tran_tmcbs(t, TMCB_RESPONSE_OUT))){
 					LOCK_REPLIES( t );
-					if(relayed_msg->REPLY_STATUS==uas_rb->activ_type) {
+					if(relayed_code==uas_rb->activ_type) {
 						run_trans_callbacks_with_buf( TMCB_RESPONSE_OUT, uas_rb,
 								t->uas.request, relayed_msg, TMCB_NONE_F);
 					}