can detect violations of this rule with CERT C Rule Pack
Section
Compass/ROSE
Section
could detect possible violations by reporting any function that has malloc() or free() but not both. This would catch some false positives, as there would be no way to tell if malloc() and free() are 'at the same level of abstraction' if they are in different functions
