[tor-bugs] #11278 [Tor]: memory leak in channel_mark_circid_unusable()

[Tor Bug Tracker & Wiki]

#11278: memory leak in channel_mark_circid_unusable()
--------------------+------------------------------------
 Reporter:  arma    |          Owner:
     Type:  defect  |         Status:  new
 Priority:  normal  |      Milestone:  Tor: 0.2.5.x-final
Component:  Tor     |        Version:
 Keywords:          |  Actual Points:
Parent ID:          |         Points:
--------------------+------------------------------------
 Running moria1 under valgrind:
 {{{
 ==29654== 40 bytes in 1 blocks are definitely lost in loss record 10 of 21
 ==29654==    at 0x4C244E8: malloc (vg_replace_malloc.c:236)
 ==29654==    by 0x501A97: tor_malloc_ (util.c:162)
 ==29654==    by 0x501F65: tor_malloc_zero_ (util.c:188)
 ==29654==    by 0x4910E1: channel_mark_circid_unusable (circuitlist.c:233)
 ==29654==    by 0x4822E0: channel_send_destroy (channel.c:2691)
 ==29654==    by 0x49E219: command_process_create_cell (command.c:234)
 ==29654==    by 0x49EB92: command_process_cell (command.c:165)
 ==29654==    by 0x4884FA: channel_tls_handle_cell (channeltls.c:1031)
 ==29654==    by 0x4BDA68: connection_or_process_cells_from_inbuf
 (connection_or.c:2059)
 ==29654==    by 0x4B38E7: connection_handle_read (connection.c:3171)
 ==29654==    by 0x42E975: conn_read_callback (main.c:735)
 ==29654==    by 0x52C9343: event_base_loop (in
 /usr/lib/libevent-1.4.so.2.1.3)
 }}}
 {{{
 ==29654== 40 bytes in 1 blocks are definitely lost in loss record 11 of 21
 ==29654==    at 0x4C244E8: malloc (vg_replace_malloc.c:236)
 ==29654==    by 0x501A97: tor_malloc_ (util.c:162)
 ==29654==    by 0x501F65: tor_malloc_zero_ (util.c:188)
 ==29654==    by 0x4910E1: channel_mark_circid_unusable (circuitlist.c:233)
 ==29654==    by 0x491D4F: circuit_set_p_circid_chan (circuitlist.c:324)
 ==29654==    by 0x491EA7: circuit_free (circuitlist.c:766)
 ==29654==    by 0x49222D: circuit_close_all_marked (circuitlist.c:433)
 ==29654==    by 0x42F3BC: second_elapsed_callback (main.c:1532)
 ==29654==    by 0x52C9343: event_base_loop (in
 /usr/lib/libevent-1.4.so.2.1.3)
 ==29654==    by 0x42C2B0: do_main_loop (main.c:2009)
 ==29654==    by 0x42D034: tor_main (main.c:2882)
 ==29654==    by 0x5EFEC8C: (below main) (libc-start.c:228)
 }}}

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/11278>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online