Incorrect code in check authorized asset for withdraw_to_account in withdraw_permission_claim_evaluator?

[btsabc]

bitshares-core/libraries/chain/withdraw_permission_evaluator.cpp

Lines 77 to 80 in dc7eb35

	const account_object& from = op.withdraw_to_account(d);
	const account_object& to = permit.authorized_account(d);
	FC_ASSERT( is_authorized_asset( d, to, _asset ) );
	FC_ASSERT( is_authorized_asset( d, from, _asset ) );

Line 77 should be:
const account_object& from = op.withdraw_from_account(d);

[abitmore]

Thanks for the report.

This issue effectively will skip white-list check for the real from account. Seems easy to fix. Let's see if we can fix it in this release.

[abitmore]

Fixed with #951.