ref-filter: plug memory leak in reach_filter()