Index: pbx/pbx_spool.c
===================================================================
--- pbx/pbx_spool.c	(revision 143404)
+++ pbx/pbx_spool.c	(working copy)
@@ -101,6 +101,9 @@
 
 static void free_outgoing(struct outgoing *o)
 {
+	if (o->vars) {
+		ast_variables_destroy(o->vars);
+	}
 	ast_free(o);
 }
 
Index: channels/chan_sip.c
===================================================================
--- channels/chan_sip.c	(revision 143404)
+++ channels/chan_sip.c	(working copy)
@@ -5666,6 +5666,8 @@
 	/* Set channel variables for this call from configuration */
 	for (v = i->chanvars ; v ; v = v->next)
 		pbx_builtin_setvar_helper(tmp, v->name, v->value);
+	ast_variables_destroy(i->chanvars);
+	i->chanvars = NULL;
 
 	if (state != AST_STATE_DOWN && ast_pbx_start(tmp)) {
 		ast_log(LOG_WARNING, "Unable to start PBX on %s\n", tmp->name);