From 37aaabbbe821ed7a9fa0dca99896633cbd5fffbc Mon Sep 17 00:00:00 2001
From: Taylor Brandstetter <deadbeef@webrtc.org>
Date: Tue, 27 Oct 2020 18:57:39 -0700
Subject: [PATCH] Free data if SCTP packet is delivered after transport
 destruction.

Follow up to:
https://webrtc-review.googlesource.com/c/src/+/184240

Bug: chromium:1127774
Change-Id: I1595d306f026f9d90cf71d8729133e46c2766c6f
Reviewed-on: https://webrtc-review.googlesource.com/c/src/+/190640
Reviewed-by: Harald Alvestrand <hta@webrtc.org>
Commit-Queue: Taylor <deadbeef@webrtc.org>
Cr-Commit-Position: refs/heads/master@{#32526}
---
 media/sctp/sctp_transport.cc | 1 +
 1 file changed, 1 insertion(+)

diff --git a/media/sctp/sctp_transport.cc b/media/sctp/sctp_transport.cc
index 2b2cc42f05..7c2eee3b13 100644
--- a/media/sctp/sctp_transport.cc
+++ b/media/sctp/sctp_transport.cc
@@ -410,6 +410,7 @@ class SctpTransport::UsrSctpWrapper {
       RTC_LOG(LS_ERROR)
           << "OnSctpInboundPacket: Failed to get transport for socket " << sock
           << "; possibly was already destroyed.";
+      free(data);
       return 0;
     }
     // Sanity check that both methods of getting the SctpTransport pointer