next_req_url, which is a zero terminated string, is not initialized when initially allocated. Later code correctly zero terminates this string 99% of the time but fails to do so if there are no Record-Route or Contact headers. Subsequent use of [next_url] will return garbage, best case.
next_req_url, which is a zero terminated string, is not initialized when initially allocated. Later code correctly zero terminates this string 99% of the time but fails to do so if there are no Record-Route or Contact headers. Subsequent use of [next_url] will return garbage, best case.