RH.LEAK
Resource leak
The RH.LEAK checker finds instances in which all descriptors related to a previously acquired, but unreleased, resource are lost.
Vulnerability and risk
There are situations in which resources are limited, and if a resource isn't properly released, it will be unavailable at the next access attempt.
Vulnerable code example
1 #include <stdio.h> 2 int foo (const char *name) { 3 FILE *f = fopen(name, "r"); 4 //...// 5 if (some_error) return 1; 6 //...// 7 fclose(f); 8 return 0; 9 }
Klocwork flags the code at line 5, indicating that a resource may be lost.