Fix some regressions caused by unattended call transfer

- The issue about TELCHAN stuck after call hold/unhold
- Asterisk crashes when call transfer is provided in an invalid scenario: Transferor calls to Transferee,
  then Transferor calls to Transfer Target, i.e. trying to let the caller do the transfer.