Cellular Network Infrastructure » Core Network (CN) » OsmoHLR

It's not my forte at all, but, if as in proxy_subscr_create_or_update() we have a:

e = talloc_zero(proxy, struct proxy_subscr_listentry);
llist_add(&e->entry, &proxy->subscr_list);

then should there be a corresponding talloc_free() some place?

because it's not in the gc which calls:

int _proxy_subscr_del(struct proxy_subscr_listentry *e)
{
    llist_del(&e->entry);
    return 0;
}

as far as I can make out, an llist_del() is just setting some values in memory, there no free'ing of any kind.
But I don't really know talloc.

I'm not familiar with this specific code, but indeed it looks like you are correct, the subscr_del should also
free the proxy_subscr_listentry, unless we still expect it to have some references at this point and expect
something else to clean up later. It would be best to get @neeels or osmith input on this.

In general, you can simply try to add a talloc_free(e) after the llist_del() and see what happens. If you
don't see any segfaults later on, it is a good indication.

Added the talloc_free, and so far, no segfaults.

However, In my branch, I implemented minimal proxy inspection from the vty, and I seem to be having those entries disappear before would be expected.

I continue to investigate. Just tagging neels again.

you are completely right, it is a memleak. fix is exactly as you were:

https://gerrit.osmocom.org/c/osmo-hlr/+/30981