From 7c27d3c9bc2fa468e61683055eb7867d216d5b3a Mon Sep 17 00:00:00 2001
From: Jehan Monnier <jehan.monnier@linphone.org>
Date: Thu, 15 Mar 2018 08:58:07 +0100
Subject: [PATCH] fix invalid read in Sal destruction

---
 src/sal/sal.cpp          | 1 -
 tester/flexisip_tester.c | 2 +-
 2 files changed, 1 insertion(+), 2 deletions(-)

diff --git a/src/sal/sal.cpp b/src/sal/sal.cpp
index 41054ddc8..3346ab05e 100644
--- a/src/sal/sal.cpp
+++ b/src/sal/sal.cpp
@@ -118,7 +118,6 @@ void Sal::process_request_event_cb (void *ud, const belle_sip_request_event_t *e
 			op->fill_cbs();
 		}else if (strcmp("REFER",method)==0) {
 			op=new SalReferOp(sal);
-			op->fill_cbs();
 		}else if (strcmp("OPTIONS",method)==0) {
 			resp=belle_sip_response_create_from_request(req,200);
 			belle_sip_provider_send_response(sal->prov,resp);
diff --git a/tester/flexisip_tester.c b/tester/flexisip_tester.c
index 11e80bab4..ef21a90ea 100644
--- a/tester/flexisip_tester.c
+++ b/tester/flexisip_tester.c
@@ -1388,7 +1388,7 @@ static void on_refer_received(SalOp *op, const SalAddress *refer_to) {
 	Sal *sal = sal_op_get_sal(op);
 	LinphoneCoreManager *receiver = (LinphoneCoreManager*)sal_get_user_pointer(sal);
 	receiver->stat.number_of_LinphoneCallRefered++;
-	sal_release_op(op);
+	
 }
 
 void resend_refer_other_devices(void) {