channeld: fix corruption when dealing with queued packets.

master is not actually a tal object! Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
7 years ago · 4e81d2431b
1 changed files with 1 additions and 1 deletions
--- a/channeld/channel.c
+++ b/channeld/channel.c
@ -1970,7 +1970,7 @@ out:
 		if (msg) {
 			/* Free old packet exactly like daemon_conn_read_next */
 			master->msg_in = tal_free(master->msg_in);
-			master->msg_in = cast_const(u8 *, tal_steal(master,msg));
+			master->msg_in = cast_const(u8 *, tal_steal(peer, msg));
 			return req_in(conn, master);
 		}
 	}