diff --git a/src/sipsess/reply.c b/src/sipsess/reply.c
index ae9f29ce6..dad7f3b70 100644
--- a/src/sipsess/reply.c
+++ b/src/sipsess/reply.c
@@ -66,7 +66,8 @@ static void tmr_handler(void *arg)
 		}
 	}
 	else {
-		mem_deref(sess); /* list_flush derefs reply */
+		mem_deref(reply);
+		mem_deref(sess);
 		return;
 	}