The page https://sqlite.org/c3ref/expanded_sql.html reads: "The string returned by sqlite3_expanded_sql(P), on the other hand, is obtained from sqlite3_malloc() and must be free by the application by passing it to sqlite3_free()." The verb "free" is missing a "d" at the end.