lua_use_fd_after_close.yaml

# Фалсит ужасно.
# home.sergeyb.sources.semgrep-rules.rules.lua.tarantool.fio.use_fd_after_close
#    use_fd_after_close

#     10┆ endpoints = {string.format("http://%s:2379", os.getenv('ETCD_HOST') or 'etcd')};
#      ⋮┆----------------------------------------
#     10┆ endpoints = {string.format("http://%s:2379", os.getenv('ETCD_HOST') or 'etcd')};
#      ⋮┆----------------------------------------
#     10┆ endpoints = {string.format("http://%s:2379", os.getenv('ETCD_HOST') or 'etcd')};
#      ⋮┆----------------------------------------
#     10┆ endpoints = {string.format("http://%s:2379", os.getenv('ETCD_HOST') or 'etcd')};

rules:
  - id: lua_use_fd_after_close
    metadata:
      author: Sergey Bronnikov <estetus@gmail.com>
      description: File descriptors leak.
    message: File descriptors leak.
    languages: [lua]
    severity: ERROR
    patterns:
      - pattern-either:
          - pattern: |
              $FD = io.open(...)
              ...
              $FD:close()
          - pattern: |
              $FD = io.open(...)
              ...
              io.close($FD)
          - pattern: |
              $FD = io.popen(...)
              ...
              $FD:close()
          - pattern: |
              $FD = io.popen(...)
              ...
              io.close($FD)
          - pattern: |
              $FD = io.lines(...)
              ...
              $FD:close()
          - pattern: |
              $FD = io.lines(...)
              ...
              io.close($FD)
      - pattern-either:
          - pattern: $FD:read(...)
          - pattern: $FD:write(...)
          - pattern: $FD:seek(...)
          - pattern: $FD:flush(...)
          - pattern: $FD:lines(...)
          - pattern: $FD:setvbuf(...)
          - pattern: io.flush($FD)
          - pattern: io.read($FD)
          - pattern: io.write($FD)
          - pattern: io.input($FD)
          - pattern: io.output($FD)