Yet another call to free() missing