Index: trunk/BNC/src/RTCM3/RTCM3coDecoder.cpp
===================================================================
--- trunk/BNC/src/RTCM3/RTCM3coDecoder.cpp	(revision 11083)
+++ trunk/BNC/src/RTCM3/RTCM3coDecoder.cpp	(revision 11097)
@@ -100,4 +100,10 @@
 
   reset();
+  // _metaData and _antenna persist across messages and are not wiped by
+  // reset(), but must start empty: only the new RTCM-SSR decoder fills them,
+  // for IGS-SSR and old RTCM-SSR streams they kept the uninitialized heap
+  // content (random NumEntries -> crash in sendResults())
+  memset(&_metaData, 0, sizeof(_metaData));
+  memset(&_antenna,  0, sizeof(_antenna));
 
   _providerID[0] = -1;
