destory -> destroy

c++/src/capnp/capability.h

@@ -341,7 +341,7 @@ protected:
   // The effect of this method is undefined if:
   // - No capability client has been created pointing to this object. (This is always the case in
   //   the server's constructor.)
-  // - The capability client pointing at this object has been destoryed. (This is always the case
+  // - The capability client pointing at this object has been destroyed. (This is always the case
   //   in the server's destructor.)
   // - Multiple capability clients have been created around the same server (possible if the server
   //   is refcounted, which is not recommended since the client itself provides refcounting).

c++/src/capnp/rpc.c++

@@ -1275,7 +1275,7 @@ private:
           // If we're still awaiting a return, then this request is being canceled, and we're going
           // to ignore any capabilities in the return message, so set releaseResultCaps true. If we
           // already received the return, then we've already built local proxies for the caps and
-          // will send Release messages when those are destoryed.
+          // will send Release messages when those are destroyed.
           builder.setReleaseResultCaps(question.isAwaitingReturn);
           message->send();
         }