From: Nick Mathewson <nickm@torproject.org>
Date: Wed, 7 May 2025 20:33:45 +0000 (-0400)
Subject: Use conflux_relay_msg_free to free a conflux_msg_t
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=41b0ea396dcb7fa548f454419426027b5afc9da3;p=thirdparty%2Ftor.git

Use conflux_relay_msg_free to free a conflux_msg_t

Fixes bug #41069; but not in any released Tor.
---

diff --git a/src/core/or/conflux_pool.c b/src/core/or/conflux_pool.c
index 9bfaf22b57..94c30ff06b 100644
--- a/src/core/or/conflux_pool.c
+++ b/src/core/or/conflux_pool.c
@@ -196,7 +196,8 @@ conflux_free_(conflux_t *cfx)
   } SMARTLIST_FOREACH_END(leg);
   smartlist_free(cfx->legs);
 
-  SMARTLIST_FOREACH(cfx->ooo_q, conflux_msg_t *, cell, tor_free(cell));
+  SMARTLIST_FOREACH(cfx->ooo_q, conflux_msg_t *, cell,
+                    conflux_relay_msg_free(cell));
   smartlist_free(cfx->ooo_q);
 
   memwipe(cfx->nonce, 0, sizeof(cfx->nonce));