missing free; found by leakmalloc