Created attachment 2913 [details]
Updated source file with the fix

The implementation of TcpRxBuffer::ClearSackList uses a for loop on the list iterator.  The for loop automatically increments the iterator in the for loop.  If the last element in the list is being erased from the list, then the automatic for loop iterator increment causes the iterator to go out of bounds and throw an error.

Updated source code with fix is attached.