Tor should clear() then free() BigIntegers
In order to have decent Forward Secrecy, secrets have to be securely disposed of... the patch attached improves the statu quo and makes my static analysis tools happier.
It replaces all occurrences of BN_free() by BN_clear_free(), even where it doesn't matter.