Fixed potential double free in tcp_data_in()