event_base_new
API Overview
event_base_new is an API in libevent. This rule belongs to the api pair type. This rule is generated using ChatDetector.
Rule Description
tip
The return value of event_base_new must be released by calling event_base_free, with the same object passed as the 1-th argument to event_base_free
info
- Tags: api pair
- Parameter Index: -1
- CWE Type: CWE-404
Rule Code
import cpp
import semmle.code.cpp.dataflow.new.DataFlow
DataFlow::Node getSource(FunctionCall fc){
fc.getTarget().hasName("event_base_new")
and result.asExpr() = fc
}
DataFlow::Node getSink(FunctionCall fc){
fc.getTarget().hasName("event_base_free")
and result.asExpr() = fc.getArgument(0)
}
FunctionCall freeTarget(FunctionCall malloc){
DataFlow::localFlow(getSource(malloc), getSink(result))
}
from FunctionCall fc
where fc.getTarget().hasName("event_base_new")
and not exists(
FunctionCall free|
free = freeTarget(fc)
)
select fc.getLocation()