set_default_cb() can allocate memory for mcl->cb but it does not free mcl->cb before exiting the function. Add freeing mcl->cb before exiting the function. Found by Linux Verification Center (linuxtesting.org) with the SVACE static analysis tool. --- profiles/health/mcap.c | 1 + 1 file changed, 1 insertion(+) diff --git a/profiles/health/mcap.c b/profiles/health/mcap.c index 5d2bac3d9..b544b9a0a 100644 --- a/profiles/health/mcap.c +++ b/profiles/health/mcap.c @@ -1907,6 +1907,7 @@ gboolean mcap_create_mcl(struct mcap_instance *mi, set_default_cb(mcl); if (util_getrandom(&val, sizeof(val), 0) < 0) { mcap_instance_unref(mcl->mi); + g_free(mcl->cb); g_free(mcl); return FALSE; } -- 2.43.0