Explicitly check that the IAT timer exists before checking pending.

The null pointer deref this guards against should never happen even without the check since the moment the client sends data, the timer will get initialized.  Better safe than sorry though.