Use conflux_relay_msg_free to free a conflux_msg_t

Fixes bug #41069; but not in any released Tor.

diff --git a/src/core/or/conflux_pool.c b/src/core/or/conflux_pool.c
index 9bfaf22b575c6bfa075a93bcea3eda233da1d87b..94c30ff06b0b4278cf1e2dae00380d41f42cbdbc 100644 (file)
--- a/src/core/or/conflux_pool.c
+++ b/src/core/or/conflux_pool.c
@@ -196,7 +196,8 @@ conflux_free_(conflux_t *cfx)
   } SMARTLIST_FOREACH_END(leg);
   smartlist_free(cfx->legs);
 
-  SMARTLIST_FOREACH(cfx->ooo_q, conflux_msg_t *, cell, tor_free(cell));
+  SMARTLIST_FOREACH(cfx->ooo_q, conflux_msg_t *, cell,
+                    conflux_relay_msg_free(cell));
   smartlist_free(cfx->ooo_q);
 
   memwipe(cfx->nonce, 0, sizeof(cfx->nonce));