Turns out we need a 2nd patch to fix a 2nd occurrence of this bug. This patch goes on top of the previous.
-- Matthias Andree
Index: sink.c =================================================================== --- sink.c (Revision 4654) +++ sink.c (Revision 4655) @@ -934,7 +934,7 @@ transient: #ifdef EXPLICIT_BOUNCE_ON_BAD_ADDRESS while (*bad_addresses) - free(from_responses[*--bad_addresses]); + free(from_responses[--*bad_addresses]); free(from_responses); #endif /* EXPLICIT_BOUNCE_ON_BAD_ADDRESS */ return(PS_TRANSIENT);