The current implementation in raw_ops.h would leak TFE_Op (variable op) if TFE_OpAddInput or TFE_Execute failed and status_check() threw. One possible solution is to wrap TFE_Op with unique_ptr.