On binder_init() the devices string is duplicated and smashed into individual device names which are passed along. However, if I'm not mistaken the original duplicated string wasn't freed in case binder_init() failed.
Christian Christian Brauner (1): binder: free memory on error drivers/android/binder.c | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) -- 2.13.3
