use after free in create_smp_dialog()
After replacing smp_data update the local pointer variable to avoid use-after-free memory access. Found on OpenBSD where the socialist millionaires dialog never opened because of this.
(from redmine: created on 2015-04-04, closed on 2016-01-03, duplicates #128 (closed))