Crash after usrsctp_finish() is called

[GoogleCodeExporter]

What steps will reproduce the problem?
1. Establish an association
2. Call usrsctp_finish() on main thread

What is the expected output? What do you see instead?
Crash happens on internal thread:
#5  0x00007fff831cd78d in szone_free_definite_size ()
#6  0x00000001000a3047 in sctp_free_assoc at 
/Users/mrubenchik/Work/3rdparty/sctp-refimpl-read-only/KERN/usrsctp/usrsctplib/n
etinet/sctp_pcb.c:5873
#7  0x00000001000baa63 in sctp_timeout_handler at 
/Users/mrubenchik/Work/3rdparty/sctp-refimpl-read-only/KERN/usrsctp/usrsctplib/n
etinet/sctputil.c:1927
#8  0x000000010006ec81 in sctp_handle_tick [inlined] at 
/Users/mrubenchik/Work/3rdparty/sctp-refimpl-read-only/KERN/usrsctp/usrsctplib/n
etinet/sctp_callout.c:155
#9  0x000000010006ec33 in user_sctp_timer_iterate at 
/Users/mrubenchik/Work/3rdparty/sctp-refimpl-read-only/KERN/usrsctp/usrsctplib/n
etinet/sctp_callout.c:194
#10 0x00007fff83d87268 in _pthread_body ()
#11 0x00007fff83d871e5 in _pthread_start ()
#12 0x00007fff83d8541d in thread_start ()


What version of the product are you using? On what operating system?
OSX 10.10.3
sctp latest repo on June 25th 2015


Please provide any additional information below.
    if (asoc->mapping_array) {
        SCTP_FREE(asoc->mapping_array, SCTP_M_MAP);
        asoc->mapping_array = NULL;
    }

Original issue reported on code.google.com by mrubenc...@gmail.com on 25 Jun 2015 at 3:13