CWE Rule Mapping: cpp/new-free-mismatch should be mapped to: CWE-762: Mismatched Memory Management Routine

[davewichers]

Description of the issue

This rule is defined as follows:

              "name": "cpp/new-free-mismatch",
              "shortDescription": { "text": "Mismatching new/free or malloc/delete" },
              "fullDescription": {
                "text": "An object that was allocated with 'malloc' or 'new' is being freed using a mismatching 'free' or 'delete'."
              } ,... },
              "properties": {
                "tags": [
                  "reliability",
                  "security",
                  "external/cwe/cwe-401"
                ],

CWE-401 is 'Missing Release of Memory after Effective Lifetime', which isn't properly specific. Whereas CWE-762: Mismatched Memory Management Routines is a MUCH better mapping.

Recommended Fix

Change the CWE mapping to CWE-762.

[jketema]

That seems reasonable. I'll get that fixed.