CodeQL library for C/C++
codeql/cpp-all 0.12.12-dev (changelog, source)
Search

Module UseAfterFree

General library for tracing Use After Free vulnerabilities.

Import path

import semmle.code.cpp.security.flowafterfree.UseAfterFree

Imports

cpp

Provides classes and predicates for working with C/C++ code.

Predicates

isUse

Holds if n represents the expression e, and e is a pointer that is guaranteed to be dereferenced (either because it’s an operand of a dereference operation, or because it’s an argument to a function that always dereferences the parameter).

isUse0

Holds if e is a use. A use is a pointer dereference or a parameter to a call with no function definition. Uses in deallocation expressions (e.g., free) are excluded. Default isUse definition for an expression.