rtmp2sink - cerbero 1.18.1 - crash in gst_rtmp_chunk_stream_serialize_start()

I don't know if it is cerbero-specific (or should I put this issue in gst-plugins-bad?), but we've got some problems with rtmp2sink under Android armeabi-v7a. The pipeline is:

videotestsrc ! x264enc ! flvmux ! rtmp2sink location=rtmp://192.168.1.11:1935/live/test

It's working fine with rtmpsink from 1.18.1, and both rtmpsink and rtmp2sink from 1.12, but rtmp2sink from 1.18.1 crashes when pipeline passing from NULL -> READY.

Backtrace:

Thread 2 "task0" received signal SIGSEGV, Segmentation fault.
[Switching to Thread 3660.3669]
0xb3ddd9b0 in magazine_cache_push_magazine () from target:/data/local/kast/libgstreamer_android.so
(gdb) bt
#0  0xb3ddd9b0 in magazine_cache_push_magazine () from target:/data/local/kast/libgstreamer_android.so
#1  0xb3ddd308 in g_slice_free1 () from target:/data/local/kast/libgstreamer_android.so
#2  0xb3d05104 in _gst_buffer_free () from target:/data/local/kast/libgstreamer_android.so
#3  0xb3d257e4 in gst_mini_object_replace () from target:/data/local/kast/libgstreamer_android.so
#4  0xb310bdae in chunk_stream_clear () from target:/data/local/kast/libgstreamer_android.so
#5  0xb310c5d8 in gst_rtmp_chunk_stream_serialize_start () from target:/data/local/kast/libgstreamer_android.so
#6  0xb310cb2c in gst_rtmp_chunk_stream_serialize_all () from target:/data/local/kast/libgstreamer_android.so
#7  0xb3107c24 in gst_rtmp_connection_start_write () from target:/data/local/kast/libgstreamer_android.so
#8  0xb3107e6e in gst_rtmp_connection_write_buffer_done () from target:/data/local/kast/libgstreamer_android.so
#9  0xb3c8dacc in g_task_return_now () from target:/data/local/kast/libgstreamer_android.so
#10 0xb3c8d088 in g_task_return () from target:/data/local/kast/libgstreamer_android.so
#11 0xb31095ac in write_all_buffer_done () from target:/data/local/kast/libgstreamer_android.so
#12 0xb3c8dacc in g_task_return_now () from target:/data/local/kast/libgstreamer_android.so
#13 0xb3c8d088 in g_task_return () from target:/data/local/kast/libgstreamer_android.so
#14 0xb3c76d44 in write_all_callback () from target:/data/local/kast/libgstreamer_android.so
#15 0xb3c8dacc in g_task_return_now () from target:/data/local/kast/libgstreamer_android.so
#16 0xb3c8d088 in g_task_return () from target:/data/local/kast/libgstreamer_android.so
#17 0xb3c769b8 in async_ready_write_callback_wrapper () from target:/data/local/kast/libgstreamer_android.so
#18 0xb3c8dacc in g_task_return_now () from target:/data/local/kast/libgstreamer_android.so
#19 0xb3c8dafa in complete_in_idle_cb () from target:/data/local/kast/libgstreamer_android.so
#20 0xb3dfb074 in g_main_context_dispatch () from target:/data/local/kast/libgstreamer_android.so
#21 0xb3dfb2d8 in g_main_context_iterate () from target:/data/local/kast/libgstreamer_android.so
#22 0xb3dfb50e in g_main_loop_run () from target:/data/local/kast/libgstreamer_android.so
#23 0xb3102e2c in gst_rtmp2_sink_task_func () from target:/data/local/kast/libgstreamer_android.so
#24 0xb3d47678 in gst_task_func () from target:/data/local/kast/libgstreamer_android.so
#25 0xb3de5930 in g_thread_pool_thread_proxy () from target:/data/local/kast/libgstreamer_android.so
#26 0xb3de4dc0 in g_thread_proxy () from target:/data/local/kast/libgstreamer_android.so
#27 0xb249def4 in __pthread_start(void*) () from target:/system/lib/libc.so
#28 0xb2470cbe in __start_thread () from target:/system/lib/libc.so
#29 0x00000000 in ?? ()

I don't see anything special in the log, only some lines:

11-18 12:15:42.158  3735  3735 I GStreamer: GStreamer initialization complete
11-18 12:15:43.264  3735  3750 V GStreamer+rtmpconnection: 0:00:02.981628627 0xb07b8ac0 ../gst/rtmp2/rtmp/rtmpconnection.c:844:gst_rtmp_connection_handle_protocol_control:<GstRtmpConnection@0xb07df5e8> set peer bandwidth: 5000000, 2

Thanks for any help on this issue!