├── .gitignore
├── .sonarsource.properties
├── README.md
├── pom.xml
└── src
    ├── main
        ├── files
        │   ├── README.md
        │   ├── cppcheck-1.52.xml
        │   ├── cppcheck-1.53.xml
        │   ├── cppcheck-1.54.xml
        │   ├── cppcheck-1.55.xml
        │   ├── cppcheck-1.56.xml
        │   ├── cppcheck-1.57.xml
        │   ├── cppcheck-1.58.xml
        │   ├── cppcheck-1.59.xml
        │   ├── cppcheck-1.60.xml
        │   ├── cppcheck-1.61.xml
        │   ├── cppcheck-1.62.xml
        │   ├── cppcheck-1.63.xml
        │   ├── cppcheck-1.64.xml
        │   ├── cppcheck-1.65.xml
        │   ├── cppcheck-1.66.xml
        │   ├── cppcheck-1.67.xml
        │   ├── cppcheck-1.68.xml
        │   ├── cppcheck-1.69.xml
        │   ├── cppcheck-1.70.xml
        │   ├── cppcheck-1.71.xml
        │   ├── cppcheck_replacements.properties
        │   └── export-rules.sh
        ├── java
        │   └── org
        │   │   └── sonarqube
        │   │       └── cppcheck
        │   │           ├── CppcheckConfiguration.java
        │   │           ├── CppcheckPlugin.java
        │   │           ├── CppcheckRuleRepository.java
        │   │           ├── CppcheckSensor.java
        │   │           ├── CppcheckXmlParser.java
        │   │           └── package-info.java
        └── resources
        │   └── org
        │       └── sonarqube
        │           └── cppcheck.xml
    └── test
        ├── java
            └── org
            │   └── sonarqube
            │       └── cppcheck
            │           ├── CppcheckConfigurationTest.java
            │           ├── CppcheckPluginTest.java
            │           ├── CppcheckRuleRepositoryTest.java
            │           ├── CppcheckSensorTest.java
            │           └── CppcheckXmlParserTest.java
        └── resources
            ├── cppcheck2.xml
            └── no-location.xml


/.gitignore:
--------------------------------------------------------------------------------
 1 | # Maven
 2 | target/
 3 | 
 4 | # IntelliJ IDEA
 5 | *.iws
 6 | *.iml
 7 | *.ipr
 8 | .idea/
 9 | 
10 | # Eclipse
11 | .classpath
12 | .project
13 | .settings
14 | 
15 | # ---- Mac OS X
16 | .DS_Store
17 | Icon?
18 | # Thumbnails
19 | ._*
20 | # Files that might appear on external disk
21 | .Spotlight-V100
22 | .Trashes
23 | 
24 | # ---- Windows
25 | # Windows image file caches
26 | Thumbs.db
27 | # Folder config file
28 | Desktop.ini
29 | 


--------------------------------------------------------------------------------
/.sonarsource.properties:
--------------------------------------------------------------------------------
1 | # Wallboard to be used at SonarSource
2 | wallboard.teamAtSonarSource=language
3 | 


--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
 1 | SonarQube Cppcheck Plugin
 2 | =========================
 3 | 
 4 | This plugin can be used to import [Cppcheck](http://cppcheck.sourceforge.net/) reports into [SonarQube](http://sonarqube.org/).
 5 | 
 6 | The plugin will not run Cppcheck but instead re-use the report generated by it.
 7 | Here are the steps:
 8 | 
 9 | 1. Download and install Cppcheck (version 1.47 or higher) on the machine running the SonarQube analysis
10 | 2. Install this SonarQube Cppcheck plugin (see the [release](https://github.com/SonarQubeCommunity/sonar-cppcheck/releases) section and the [instructions](http://docs.sonarqube.org/display/SONAR/Installing+a+Plugin) to manually install a SonarQube plugin) 
11 | 2. Run Cppcheck to create an xml report:
12 | 
13 |   ```
14 |   cppcheck --xml --xml-version=2 --enable=all <source-location> 2> cppcheck-report.xml
15 |   ```
16 | 
17 | 3. Set the `sonar.cppcheck.reportPath` analysis property to the path of the Cppcheck xml report, e.g.:
18 | 
19 |   ```
20 |   sonar.cppcheck.reportPath=cppcheck-report.xml
21 |   ```
22 | 
23 | 4. Activate some Cppcheck rules in your quality profile
24 | 5. Run the SonarQube analysis on your project
25 | 


--------------------------------------------------------------------------------
/pom.xml:
--------------------------------------------------------------------------------
  1 | <?xml version="1.0" encoding="UTF-8"?>
  2 | <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd">
  3 |   <modelVersion>4.0.0</modelVersion>
  4 | 
  5 |   <groupId>org.sonarqube.cppcheck</groupId>
  6 |   <artifactId>sonar-cppcheck-plugin</artifactId>
  7 |   <version>1.1-SNAPSHOT</version>
  8 |   <packaging>sonar-plugin</packaging>
  9 | 
 10 |   <name>SonarQube :: Cppcheck Plugin</name>
 11 |   <description>Import Cppcheck reports.</description>
 12 |   <url>https://github.com/SonarQubeCommunity/sonar-cppcheck</url>
 13 |   <inceptionYear>2016</inceptionYear>
 14 |   <licenses>
 15 |     <license>
 16 |       <name>GNU LGPL 3</name>
 17 |       <url>http://www.gnu.org/licenses/lgpl.txt</url>
 18 |       <distribution>repo</distribution>
 19 |     </license>
 20 |   </licenses>
 21 | 
 22 |   <prerequisites>
 23 |     <maven>3.0.5</maven>
 24 |   </prerequisites>
 25 | 
 26 |   <scm>
 27 |     <connection>scm:git:git@github.com:SonarQubeCommunity/sonar-cppcheck.git</connection>
 28 |     <developerConnection>scm:git:git@github.com:SonarQubeCommunity/sonar-cppcheck.git</developerConnection>
 29 |     <url>https://github.com/SonarQubeCommunity/sonar-cppcheck</url>
 30 |     <tag>HEAD</tag>
 31 |   </scm>
 32 | 
 33 |   <properties>
 34 |     <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
 35 | 
 36 |     <maven.compiler.source>1.7</maven.compiler.source>
 37 |     <maven.compiler.target>1.7</maven.compiler.target>
 38 | 
 39 |     <sonar.version>4.5.4</sonar.version>
 40 |   </properties>
 41 | 
 42 |   <dependencies>
 43 |     <dependency>
 44 |       <groupId>org.codehaus.sonar</groupId>
 45 |       <artifactId>sonar-plugin-api</artifactId>
 46 |       <version>${sonar.version}</version>
 47 |       <scope>provided</scope>
 48 |     </dependency>
 49 |     <dependency>
 50 |       <groupId>org.codehaus.sonar</groupId>
 51 |       <artifactId>sonar-deprecated</artifactId>
 52 |       <version>${sonar.version}</version>
 53 |       <scope>provided</scope>
 54 |     </dependency>
 55 | 
 56 |     <dependency>
 57 |       <groupId>org.easytesting</groupId>
 58 |       <artifactId>fest-assert</artifactId>
 59 |       <version>1.4</version>
 60 |       <scope>test</scope>
 61 |     </dependency>
 62 |     <dependency>
 63 |       <groupId>junit</groupId>
 64 |       <artifactId>junit</artifactId>
 65 |       <version>4.12</version>
 66 |       <scope>test</scope>
 67 |     </dependency>
 68 |     <dependency>
 69 |       <groupId>org.mockito</groupId>
 70 |       <artifactId>mockito-all</artifactId>
 71 |       <version>1.9.5</version>
 72 |       <scope>test</scope>
 73 |     </dependency>
 74 |     <dependency>
 75 |       <groupId>xmlunit</groupId>
 76 |       <artifactId>xmlunit</artifactId>
 77 |       <version>1.4</version>
 78 |       <scope>test</scope>
 79 |     </dependency>
 80 |   </dependencies>
 81 | 
 82 |   <build>
 83 |     <pluginManagement>
 84 |       <plugins>
 85 |         <plugin>
 86 |           <groupId>org.apache.maven.plugins</groupId>
 87 |           <artifactId>maven-compiler-plugin</artifactId>
 88 |           <version>3.5.1</version>
 89 |         </plugin>
 90 |       </plugins>
 91 |     </pluginManagement>
 92 |     <plugins>
 93 |       <plugin>
 94 |         <groupId>org.apache.maven.plugins</groupId>
 95 |         <artifactId>maven-enforcer-plugin</artifactId>
 96 |         <version>1.2</version>
 97 |         <executions>
 98 |           <execution>
 99 |             <id>enforce-plugin-size</id>
100 |             <goals>
101 |               <goal>enforce</goal>
102 |             </goals>
103 |             <phase>verify</phase>
104 |             <configuration>
105 |               <rules>
106 |                 <requireFilesSize>
107 |                   <maxsize>35000</maxsize>
108 |                   <minsize>34000</minsize>
109 |                   <files>
110 |                     <file>${project.build.directory}/${project.build.finalName}.jar</file>
111 |                   </files>
112 |                 </requireFilesSize>
113 |               </rules>
114 |             </configuration>
115 |           </execution>
116 |         </executions>
117 |       </plugin>
118 |       <plugin>
119 |         <groupId>org.sonarsource.sonar-packaging-maven-plugin</groupId>
120 |         <artifactId>sonar-packaging-maven-plugin</artifactId>
121 |         <version>1.15</version>
122 |         <extensions>true</extensions>
123 |         <configuration>
124 |           <pluginClass>org.sonarqube.cppcheck.CppcheckPlugin</pluginClass>
125 |         </configuration>
126 |       </plugin>
127 |     </plugins>
128 |   </build>
129 | </project>
130 | 


--------------------------------------------------------------------------------
/src/main/files/README.md:
--------------------------------------------------------------------------------
 1 | Descriptions of rules from different Cppcheck versions for automatic merge.
 2 | 
 3 | # Export rules using the bash script
 4 | 
 5 | Use ```export-rules.sh``` to export the rules, for example:
 6 | 
 7 | ```bash
 8 | ./export-rules.sh 1.68 1.69 1.70
 9 | ```
10 | 
11 | # Export rules manually
12 | 
13 | - Download the source of the new cppcheck version from http://sourceforge.net/projects/cppcheck/files/cppcheck/
14 | - Uncompress and build cppcheck using the command:
15 | 
16 | ```bash
17 | make
18 | ```
19 | 
20 | - Export the rules using ```cppcheck```, for example:
21 | 
22 | ```bash
23 | ./cppcheck --xml --xml-version=2 --errorlist > cppcheck-1.68.xml
24 | ```
25 | 


--------------------------------------------------------------------------------
/src/main/files/cppcheck-1.52.xml:
--------------------------------------------------------------------------------
  1 | <?xml version="1.0" encoding="UTF-8"?>
  2 | <results version="2">
  3 |   <cppcheck version="1.52"/>
  4 |   <errors>  <error id="AssignmentAddressToInteger" severity="portability" msg="Assigning an address value to the integer (int/long/etc) type is not portable" verbose="Assigning an address value to the integer (int/long/etc) type is not portable across different platforms and compilers. For example in 32-bit Windows and linux they are same width, but in 64-bit Windows and linux they are of different width. In worst case you end up assigning 64-bit address to 32-bit integer. The safe way is to always assign addresses only to pointer types (or typedefs).">
  5 |   </error>
  6 |   <error id="AssignmentIntegerToAddress" severity="portability" msg="Assigning an integer (int/long/etc) to a pointer is not portable" verbose="Assigning an integer (int/long/etc) to a pointer is not portable across different platforms and compilers. For example in 32-bit Windows and linux they are same width, but in 64-bit Windows and linux they are of different width. In worst case you end up assigning 32-bit integer to 64-bit pointer. The safe way is to always assign address to pointer.">
  7 |   </error>
  8 |   <error id="autoVariables" severity="error" msg="Assigning address of local auto-variable to a function parameter." verbose="Dangerous assignment - function parameter takes the address of a local auto-variable. Local auto-variables are reserved from the stack. And the stack is freed when the function ends. So the pointer to a local variable is invalid after the function ends.">
  9 |   </error>
 10 |   <error id="returnAddressOfAutoVariable" severity="error" msg="Return of the address of an auto-variable" verbose="Return of the address of an auto-variable">
 11 |   </error>
 12 |   <error id="returnLocalVariable" severity="error" msg="Returning pointer to local array variable" verbose="Returning pointer to local array variable">
 13 |   </error>
 14 |   <error id="returnReference" severity="error" msg="Returning reference to auto variable" verbose="Returning reference to auto variable">
 15 |   </error>
 16 |   <error id="returnTempReference" severity="error" msg="Returning reference to temporary" verbose="Returning reference to temporary">
 17 |   </error>
 18 |   <error id="returnAutocstr" severity="error" msg="Returning pointer to auto variable" verbose="Returning pointer to auto variable">
 19 |   </error>
 20 |   <error id="returnTempPointer" severity="error" msg="Returning pointer to temporary" verbose="Returning pointer to temporary">
 21 |   </error>
 22 |   <error id="autovarInvalidDeallocation" severity="error" msg="Invalid deallocation" verbose="Invalid deallocation">
 23 |   </error>
 24 |   <error id="returnAddressOfFunctionParameter" severity="error" msg="Return the address of function parameter 'parameter'" verbose="Address of the function parameter 'parameter' is invalid after the function exits. Function parameters are created into the stack. When the function exits the stack is deleted.">
 25 |   </error>
 26 |   <error id="boostForeachError" severity="error" msg="BOOST_FOREACH caches the end() iterator. It's undefined behavior if you modify the container." verbose="BOOST_FOREACH caches the end() iterator. It's undefined behavior if you modify the container.">
 27 |   </error>
 28 |   <error id="arrayIndexOutOfBounds" severity="error" msg="Array 'array[2]' index 2 out of bounds" verbose="Array 'array[2]' index 2 out of bounds">
 29 |   </error>
 30 |   <error id="bufferAccessOutOfBounds" severity="error" msg="Buffer access out-of-bounds: buffer" verbose="Buffer access out-of-bounds: buffer">
 31 |   </error>
 32 |   <error id="outOfBounds" severity="error" msg="index is out of bounds: Supplied size 2 is larger than actual size of 1" verbose="index is out of bounds: Supplied size 2 is larger than actual size of 1">
 33 |   </error>
 34 |   <error id="terminateStrncpy" severity="warning" msg="The buffer 'buffer' may not be zero-terminated after the call to strncpy()." verbose="The use of strncpy() usually indicates that the programmer wants to ensure the buffer is zero-terminated after the call. However if the (buffer) size given for the strncpy() call matches the actual buffer size strncpy() does not add the zero at the end of the buffer. This may cause bugs later in the code if the code assumes buffer is zero-terminated.">
 35 |   </error>
 36 | 
 37 |   <error id="negativeIndex" severity="error" msg="Array index -1 is out of bounds" verbose="Array index -1 is out of bounds">
 38 |   </error>
 39 |   <error id="insecureCmdLineArgs" severity="error" msg="Buffer overrun possible for long cmd-line args" verbose="Buffer overrun possible for long cmd-line args">
 40 |   </error>
 41 |   <error id="pointerOutOfBounds" severity="portability" msg="Undefined behaviour: pointer arithmetic result does not point into or just past the end of the array" verbose="Undefined behaviour: Using pointer arithmetic so that the result does not point into or just past the end of the same object. Further information: https://www.securecoding.cert.org/confluence/display/seccode/ARR30-C.+Do+not+form+or+use+out+of+bounds+pointers+or+array+subscripts">
 42 |   </error>
 43 |   <error id="arrayIndexThenCheck" severity="style" msg="Array index index is used before limits check" verbose="Defensive programming: The variable index is used as array index and then there is a check that it is within limits. This can mean that the array might be accessed out-of-bounds. Reorder conditions such as '(a[i] &amp;&amp; i &lt; 10)' to '(i &lt; 10 &amp;&amp; a[i])'. That way the array will not be accessed when the index is out of limits.">
 44 |   </error>
 45 |   <error id="possibleBufferAccessOutOfBounds" severity="warning" msg="Possible buffer overflow if strlen(source) is larger than or equal to sizeof(destination)." verbose="The source buffer is larger than the destination buffer so there is the potential for overflowing the destination buffer.">
 46 |   </error>
 47 | 
 48 |   <error id="noConstructor" severity="style" msg="The class 'classname' does not have a constructor." verbose="The class 'classname 'does not have a constructor but it has attributes. The attributes are not initialized which may cause bugs or undefined behavior.">
 49 |   </error>
 50 |   <error id="uninitVar" severity="warning" msg="Member variable 'classname::varname' is not initialized in the constructor." verbose="Member variable 'classname::varname' is not initialized in the constructor.">
 51 |   </error>
 52 |   <error id="operatorEqVarError" severity="warning" msg="Member variable 'classname::' is not assigned a value in 'classname::operator='" verbose="Member variable 'classname::' is not assigned a value in 'classname::operator='">
 53 |   </error>
 54 |   <error id="unusedPrivateFunction" severity="style" msg="Unused private function 'classname::funcname'" verbose="Unused private function 'classname::funcname'">
 55 |   </error>
 56 |   <error id="memsetClass" severity="error" msg="Using 'memfunc' on class that contains a classname" verbose="Using 'memfunc' on class that contains a classname">
 57 |   </error>
 58 | 
 59 |   <error id="thisSubtraction" severity="warning" msg="Suspicious pointer subtraction" verbose="Suspicious pointer subtraction">
 60 |   </error>
 61 |   <error id="operatorEqRetRefThis" severity="style" msg="'operator=' should return reference to self" verbose="'operator=' should return reference to self">
 62 |   </error>
 63 |   <error id="operatorEqToSelf" severity="warning" msg="'operator=' should check for assignment to self" verbose="'operator=' should check for assignment to self">
 64 |   </error>
 65 | 
 66 |   <error id="initializerList" severity="style" msg="Member variable 'class::variable' is in the wrong order in the initializer list." verbose="Members are initialized in the order they are declared, not the order they are in the initializer list.  Keeping the initializer list in the same order that the members were declared prevents order dependent initialization errors.">
 67 |   </error>
 68 |   <error id="exceptThrowInDestructor" severity="error" msg="Throwing exception in destructor" verbose="Throwing exception in destructor">
 69 |   </error>
 70 |   <error id="exceptDeallocThrow" severity="error" msg="Throwing exception in invalid state, p points at deallocated memory" verbose="Throwing exception in invalid state, p points at deallocated memory">
 71 |   </error>
 72 |   <error id="exceptRethrowCopy" severity="style" msg="Throwing a copy of the caught exception instead of rethrowing the original exception" verbose="Rethrowing an exception with 'throw varname;' makes an unnecessary copy of 'varname'.&#xa;To rethrow the caught exception without unnecessary copying or slicing, use a bare 'throw;'.">
 73 |   </error>
 74 |   <error id="assignIfError" severity="style" msg="Mismatching assignment and comparison, comparison is always false" verbose="Mismatching assignment and comparison, comparison is always false">
 75 |   </error>
 76 |   <error id="comparisonError" severity="style" msg="Expression '(X &amp; 0x6) == 0x1' is always false" verbose="The expression '(X &amp; 0x6) == 0x1' is always false. Check carefully constants and operators used, these errors might be hard to spot sometimes. In case of complex expression it might help to split it to separate expressions.">
 77 |   </error>
 78 |   <error id="multiCondition" severity="style" msg="'else if' condition matches previous condition at line 1" verbose="'else if' condition matches previous condition at line 1">
 79 |   </error>
 80 |   <error id="memleak" severity="error" msg="Memory leak: varname" verbose="Memory leak: varname">
 81 |   </error>
 82 |   <error id="resourceLeak" severity="error" msg="Resource leak: varname" verbose="Resource leak: varname">
 83 |   </error>
 84 |   <error id="deallocDealloc" severity="error" msg="Deallocating a deallocated pointer: varname" verbose="Deallocating a deallocated pointer: varname">
 85 |   </error>
 86 |   <error id="deallocuse" severity="error" msg="Dereferencing 'varname' after it is deallocated / released" verbose="Dereferencing 'varname' after it is deallocated / released">
 87 |   </error>
 88 |   <error id="mismatchSize" severity="error" msg="The given size sz is mismatching" verbose="The given size sz is mismatching">
 89 |   </error>
 90 |   <error id="mismatchAllocDealloc" severity="error" msg="Mismatching allocation and deallocation: varname" verbose="Mismatching allocation and deallocation: varname">
 91 |   </error>
 92 |   <error id="memleakOnRealloc" severity="error" msg="Common realloc mistake: 'varname' nulled but not freed upon failure" verbose="Common realloc mistake: 'varname' nulled but not freed upon failure">
 93 |   </error>
 94 |   <error id="nonreentrantFunctionsasctime" severity="portability" msg="Found non reentrant function 'asctime'. For threadsafe applications it is recommended to use the reentrant replacement function 'asctime_r'" verbose="Found non reentrant function 'asctime'. For threadsafe applications it is recommended to use the reentrant replacement function 'asctime_r'">
 95 |   </error>
 96 |   <error id="nonreentrantFunctionscrypt" severity="portability" msg="Found non reentrant function 'crypt'. For threadsafe applications it is recommended to use the reentrant replacement function 'crypt_r'" verbose="Found non reentrant function 'crypt'. For threadsafe applications it is recommended to use the reentrant replacement function 'crypt_r'">
 97 |   </error>
 98 |   <error id="nonreentrantFunctionsctermid" severity="portability" msg="Found non reentrant function 'ctermid'. For threadsafe applications it is recommended to use the reentrant replacement function 'ctermid_r'" verbose="Found non reentrant function 'ctermid'. For threadsafe applications it is recommended to use the reentrant replacement function 'ctermid_r'">
 99 |   </error>
100 |   <error id="nonreentrantFunctionsctime" severity="portability" msg="Found non reentrant function 'ctime'. For threadsafe applications it is recommended to use the reentrant replacement function 'ctime_r'" verbose="Found non reentrant function 'ctime'. For threadsafe applications it is recommended to use the reentrant replacement function 'ctime_r'">
101 |   </error>
102 |   <error id="nonreentrantFunctionsecvt" severity="portability" msg="Found non reentrant function 'ecvt'. For threadsafe applications it is recommended to use the reentrant replacement function 'ecvt_r'" verbose="Found non reentrant function 'ecvt'. For threadsafe applications it is recommended to use the reentrant replacement function 'ecvt_r'">
103 |   </error>
104 |   <error id="nonreentrantFunctionsfcvt" severity="portability" msg="Found non reentrant function 'fcvt'. For threadsafe applications it is recommended to use the reentrant replacement function 'fcvt_r'" verbose="Found non reentrant function 'fcvt'. For threadsafe applications it is recommended to use the reentrant replacement function 'fcvt_r'">
105 |   </error>
106 |   <error id="nonreentrantFunctionsfgetgrent" severity="portability" msg="Found non reentrant function 'fgetgrent'. For threadsafe applications it is recommended to use the reentrant replacement function 'fgetgrent_r'" verbose="Found non reentrant function 'fgetgrent'. For threadsafe applications it is recommended to use the reentrant replacement function 'fgetgrent_r'">
107 |   </error>
108 |   <error id="nonreentrantFunctionsfgetpwent" severity="portability" msg="Found non reentrant function 'fgetpwent'. For threadsafe applications it is recommended to use the reentrant replacement function 'fgetpwent_r'" verbose="Found non reentrant function 'fgetpwent'. For threadsafe applications it is recommended to use the reentrant replacement function 'fgetpwent_r'">
109 |   </error>
110 |   <error id="nonreentrantFunctionsfgetspent" severity="portability" msg="Found non reentrant function 'fgetspent'. For threadsafe applications it is recommended to use the reentrant replacement function 'fgetspent_r'" verbose="Found non reentrant function 'fgetspent'. For threadsafe applications it is recommended to use the reentrant replacement function 'fgetspent_r'">
111 |   </error>
112 |   <error id="nonreentrantFunctionsgcvt" severity="portability" msg="Found non reentrant function 'gcvt'. For threadsafe applications it is recommended to use the reentrant replacement function 'gcvt_r'" verbose="Found non reentrant function 'gcvt'. For threadsafe applications it is recommended to use the reentrant replacement function 'gcvt_r'">
113 |   </error>
114 |   <error id="nonreentrantFunctionsgetgrent" severity="portability" msg="Found non reentrant function 'getgrent'. For threadsafe applications it is recommended to use the reentrant replacement function 'getgrent_r'" verbose="Found non reentrant function 'getgrent'. For threadsafe applications it is recommended to use the reentrant replacement function 'getgrent_r'">
115 |   </error>
116 |   <error id="nonreentrantFunctionsgetgrgid" severity="portability" msg="Found non reentrant function 'getgrgid'. For threadsafe applications it is recommended to use the reentrant replacement function 'getgrgid_r'" verbose="Found non reentrant function 'getgrgid'. For threadsafe applications it is recommended to use the reentrant replacement function 'getgrgid_r'">
117 |   </error>
118 |   <error id="nonreentrantFunctionsgetgrnam" severity="portability" msg="Found non reentrant function 'getgrnam'. For threadsafe applications it is recommended to use the reentrant replacement function 'getgrnam_r'" verbose="Found non reentrant function 'getgrnam'. For threadsafe applications it is recommended to use the reentrant replacement function 'getgrnam_r'">
119 |   </error>
120 |   <error id="nonreentrantFunctionsgethostbyaddr" severity="portability" msg="Found non reentrant function 'gethostbyaddr'. For threadsafe applications it is recommended to use the reentrant replacement function 'gethostbyaddr_r'" verbose="Found non reentrant function 'gethostbyaddr'. For threadsafe applications it is recommended to use the reentrant replacement function 'gethostbyaddr_r'">
121 |   </error>
122 |   <error id="nonreentrantFunctionsgethostbyname" severity="portability" msg="Found non reentrant function 'gethostbyname'. For threadsafe applications it is recommended to use the reentrant replacement function 'gethostbyname_r'" verbose="Found non reentrant function 'gethostbyname'. For threadsafe applications it is recommended to use the reentrant replacement function 'gethostbyname_r'">
123 |   </error>
124 |   <error id="nonreentrantFunctionsgethostbyname2" severity="portability" msg="Found non reentrant function 'gethostbyname2'. For threadsafe applications it is recommended to use the reentrant replacement function 'gethostbyname2_r'" verbose="Found non reentrant function 'gethostbyname2'. For threadsafe applications it is recommended to use the reentrant replacement function 'gethostbyname2_r'">
125 |   </error>
126 |   <error id="nonreentrantFunctionsgethostent" severity="portability" msg="Found non reentrant function 'gethostent'. For threadsafe applications it is recommended to use the reentrant replacement function 'gethostent_r'" verbose="Found non reentrant function 'gethostent'. For threadsafe applications it is recommended to use the reentrant replacement function 'gethostent_r'">
127 |   </error>
128 |   <error id="nonreentrantFunctionsgetlogin" severity="portability" msg="Found non reentrant function 'getlogin'. For threadsafe applications it is recommended to use the reentrant replacement function 'getlogin_r'" verbose="Found non reentrant function 'getlogin'. For threadsafe applications it is recommended to use the reentrant replacement function 'getlogin_r'">
129 |   </error>
130 |   <error id="nonreentrantFunctionsgetnetbyaddr" severity="portability" msg="Found non reentrant function 'getnetbyaddr'. For threadsafe applications it is recommended to use the reentrant replacement function 'getnetbyaddr_r'" verbose="Found non reentrant function 'getnetbyaddr'. For threadsafe applications it is recommended to use the reentrant replacement function 'getnetbyaddr_r'">
131 |   </error>
132 |   <error id="nonreentrantFunctionsgetnetbyname" severity="portability" msg="Found non reentrant function 'getnetbyname'. For threadsafe applications it is recommended to use the reentrant replacement function 'getnetbyname_r'" verbose="Found non reentrant function 'getnetbyname'. For threadsafe applications it is recommended to use the reentrant replacement function 'getnetbyname_r'">
133 |   </error>
134 |   <error id="nonreentrantFunctionsgetnetgrent" severity="portability" msg="Found non reentrant function 'getnetgrent'. For threadsafe applications it is recommended to use the reentrant replacement function 'getnetgrent_r'" verbose="Found non reentrant function 'getnetgrent'. For threadsafe applications it is recommended to use the reentrant replacement function 'getnetgrent_r'">
135 |   </error>
136 |   <error id="nonreentrantFunctionsgetprotobyname" severity="portability" msg="Found non reentrant function 'getprotobyname'. For threadsafe applications it is recommended to use the reentrant replacement function 'getprotobyname_r'" verbose="Found non reentrant function 'getprotobyname'. For threadsafe applications it is recommended to use the reentrant replacement function 'getprotobyname_r'">
137 |   </error>
138 |   <error id="nonreentrantFunctionsgetpwent" severity="portability" msg="Found non reentrant function 'getpwent'. For threadsafe applications it is recommended to use the reentrant replacement function 'getpwent_r'" verbose="Found non reentrant function 'getpwent'. For threadsafe applications it is recommended to use the reentrant replacement function 'getpwent_r'">
139 |   </error>
140 |   <error id="nonreentrantFunctionsgetpwnam" severity="portability" msg="Found non reentrant function 'getpwnam'. For threadsafe applications it is recommended to use the reentrant replacement function 'getpwnam_r'" verbose="Found non reentrant function 'getpwnam'. For threadsafe applications it is recommended to use the reentrant replacement function 'getpwnam_r'">
141 |   </error>
142 |   <error id="nonreentrantFunctionsgetpwuid" severity="portability" msg="Found non reentrant function 'getpwuid'. For threadsafe applications it is recommended to use the reentrant replacement function 'getpwuid_r'" verbose="Found non reentrant function 'getpwuid'. For threadsafe applications it is recommended to use the reentrant replacement function 'getpwuid_r'">
143 |   </error>
144 |   <error id="nonreentrantFunctionsgetrpcbyname" severity="portability" msg="Found non reentrant function 'getrpcbyname'. For threadsafe applications it is recommended to use the reentrant replacement function 'getrpcbyname_r'" verbose="Found non reentrant function 'getrpcbyname'. For threadsafe applications it is recommended to use the reentrant replacement function 'getrpcbyname_r'">
145 |   </error>
146 |   <error id="nonreentrantFunctionsgetrpcbynumber" severity="portability" msg="Found non reentrant function 'getrpcbynumber'. For threadsafe applications it is recommended to use the reentrant replacement function 'getrpcbynumber_r'" verbose="Found non reentrant function 'getrpcbynumber'. For threadsafe applications it is recommended to use the reentrant replacement function 'getrpcbynumber_r'">
147 |   </error>
148 |   <error id="nonreentrantFunctionsgetrpcent" severity="portability" msg="Found non reentrant function 'getrpcent'. For threadsafe applications it is recommended to use the reentrant replacement function 'getrpcent_r'" verbose="Found non reentrant function 'getrpcent'. For threadsafe applications it is recommended to use the reentrant replacement function 'getrpcent_r'">
149 |   </error>
150 |   <error id="nonreentrantFunctionsgetservbyname" severity="portability" msg="Found non reentrant function 'getservbyname'. For threadsafe applications it is recommended to use the reentrant replacement function 'getservbyname_r'" verbose="Found non reentrant function 'getservbyname'. For threadsafe applications it is recommended to use the reentrant replacement function 'getservbyname_r'">
151 |   </error>
152 |   <error id="nonreentrantFunctionsgetservbyport" severity="portability" msg="Found non reentrant function 'getservbyport'. For threadsafe applications it is recommended to use the reentrant replacement function 'getservbyport_r'" verbose="Found non reentrant function 'getservbyport'. For threadsafe applications it is recommended to use the reentrant replacement function 'getservbyport_r'">
153 |   </error>
154 |   <error id="nonreentrantFunctionsgetservent" severity="portability" msg="Found non reentrant function 'getservent'. For threadsafe applications it is recommended to use the reentrant replacement function 'getservent_r'" verbose="Found non reentrant function 'getservent'. For threadsafe applications it is recommended to use the reentrant replacement function 'getservent_r'">
155 |   </error>
156 |   <error id="nonreentrantFunctionsgetspent" severity="portability" msg="Found non reentrant function 'getspent'. For threadsafe applications it is recommended to use the reentrant replacement function 'getspent_r'" verbose="Found non reentrant function 'getspent'. For threadsafe applications it is recommended to use the reentrant replacement function 'getspent_r'">
157 |   </error>
158 |   <error id="nonreentrantFunctionsgetspnam" severity="portability" msg="Found non reentrant function 'getspnam'. For threadsafe applications it is recommended to use the reentrant replacement function 'getspnam_r'" verbose="Found non reentrant function 'getspnam'. For threadsafe applications it is recommended to use the reentrant replacement function 'getspnam_r'">
159 |   </error>
160 |   <error id="nonreentrantFunctionsgmtime" severity="portability" msg="Found non reentrant function 'gmtime'. For threadsafe applications it is recommended to use the reentrant replacement function 'gmtime_r'" verbose="Found non reentrant function 'gmtime'. For threadsafe applications it is recommended to use the reentrant replacement function 'gmtime_r'">
161 |   </error>
162 |   <error id="nonreentrantFunctionslocaltime" severity="portability" msg="Found non reentrant function 'localtime'. For threadsafe applications it is recommended to use the reentrant replacement function 'localtime_r'" verbose="Found non reentrant function 'localtime'. For threadsafe applications it is recommended to use the reentrant replacement function 'localtime_r'">
163 |   </error>
164 |   <error id="nonreentrantFunctionsrand" severity="portability" msg="Found non reentrant function 'rand'. For threadsafe applications it is recommended to use the reentrant replacement function 'rand_r'" verbose="Found non reentrant function 'rand'. For threadsafe applications it is recommended to use the reentrant replacement function 'rand_r'">
165 |   </error>
166 |   <error id="nonreentrantFunctionsreaddir" severity="portability" msg="Found non reentrant function 'readdir'. For threadsafe applications it is recommended to use the reentrant replacement function 'readdir_r'" verbose="Found non reentrant function 'readdir'. For threadsafe applications it is recommended to use the reentrant replacement function 'readdir_r'">
167 |   </error>
168 |   <error id="nonreentrantFunctionsstrtok" severity="portability" msg="Found non reentrant function 'strtok'. For threadsafe applications it is recommended to use the reentrant replacement function 'strtok_r'" verbose="Found non reentrant function 'strtok'. For threadsafe applications it is recommended to use the reentrant replacement function 'strtok_r'">
169 |   </error>
170 |   <error id="nonreentrantFunctionstempnam" severity="portability" msg="Found non reentrant function 'tempnam'. For threadsafe applications it is recommended to use the reentrant replacement function 'tempnam_r'" verbose="Found non reentrant function 'tempnam'. For threadsafe applications it is recommended to use the reentrant replacement function 'tempnam_r'">
171 |   </error>
172 |   <error id="nonreentrantFunctionstmpnam" severity="portability" msg="Found non reentrant function 'tmpnam'. For threadsafe applications it is recommended to use the reentrant replacement function 'tmpnam_r'" verbose="Found non reentrant function 'tmpnam'. For threadsafe applications it is recommended to use the reentrant replacement function 'tmpnam_r'">
173 |   </error>
174 |   <error id="nonreentrantFunctionsttyname" severity="portability" msg="Found non reentrant function 'ttyname'. For threadsafe applications it is recommended to use the reentrant replacement function 'ttyname_r'" verbose="Found non reentrant function 'ttyname'. For threadsafe applications it is recommended to use the reentrant replacement function 'ttyname_r'">
175 |   </error>
176 |   <error id="nullPointer" severity="error" msg="Possible null pointer dereference: pointer" verbose="Possible null pointer dereference: pointer">
177 |   </error>
178 |   <error id="obsoleteFunctionsbcmp" severity="style" msg="Found obsolete function 'bcmp'. It is recommended that new applications use the 'memcmp' function" verbose="Found obsolete function 'bcmp'. It is recommended that new applications use the 'memcmp' function">
179 |   </error>
180 |   <error id="obsoleteFunctionsbcopy" severity="style" msg="Found obsolete function 'bcopy'. It is recommended that new applications use the 'memmove' or 'memcpy' functions" verbose="Found obsolete function 'bcopy'. It is recommended that new applications use the 'memmove' or 'memcpy' functions">
181 |   </error>
182 |   <error id="obsoleteFunctionsbsd_signal" severity="style" msg="Found obsolete function 'bsd_signal'. It is recommended that new applications use the 'sigaction' function" verbose="Found obsolete function 'bsd_signal'. It is recommended that new applications use the 'sigaction' function">
183 |   </error>
184 |   <error id="obsoleteFunctionsbzero" severity="style" msg="Found obsolete function 'bzero'. It is recommended that new applications use the 'memset' function" verbose="Found obsolete function 'bzero'. It is recommended that new applications use the 'memset' function">
185 |   </error>
186 |   <error id="obsoleteFunctionsecvt" severity="style" msg="Found obsolete function 'ecvt'. It is recommended that new applications use the 'sprintf' function" verbose="Found obsolete function 'ecvt'. It is recommended that new applications use the 'sprintf' function">
187 |   </error>
188 |   <error id="obsoleteFunctionsfcvt" severity="style" msg="Found obsolete function 'fcvt'. It is recommended that new applications use the 'sprintf' function" verbose="Found obsolete function 'fcvt'. It is recommended that new applications use the 'sprintf' function">
189 |   </error>
190 |   <error id="obsoleteFunctionsftime" severity="style" msg="Found obsolete function 'ftime'." verbose="It is recommended that new applications use time(), gettimeofday(), or clock_gettime() instead. For high-resolution timing on Windows, QueryPerformanceCounter() and QueryPerformanceFrequency may be used.">
191 |   </error>
192 |   <error id="obsoleteFunctionsgcvt" severity="style" msg="Found obsolete function 'gcvt'. It is recommended that new applications use the 'sprintf' function" verbose="Found obsolete function 'gcvt'. It is recommended that new applications use the 'sprintf' function">
193 |   </error>
194 |   <error id="obsoleteFunctionsgetcontext" severity="style" msg="Found obsolete function 'getcontext'. Due to portability issues with this function, applications are recommended to be rewritten to use POSIX threads" verbose="Found obsolete function 'getcontext'. Due to portability issues with this function, applications are recommended to be rewritten to use POSIX threads">
195 |   </error>
196 |   <error id="obsoleteFunctionsgethostbyaddr" severity="style" msg="Found obsolete function 'gethostbyaddr'. It is recommended that new applications use the 'getnameinfo' function" verbose="Found obsolete function 'gethostbyaddr'. It is recommended that new applications use the 'getnameinfo' function">
197 |   </error>
198 |   <error id="obsoleteFunctionsgethostbyname" severity="style" msg="Found obsolete function 'gethostbyname'. It is recommended that new applications use the 'getaddrinfo' function" verbose="Found obsolete function 'gethostbyname'. It is recommended that new applications use the 'getaddrinfo' function">
199 |   </error>
200 |   <error id="obsoleteFunctionsgetwd" severity="style" msg="Found obsolete function 'getwd'. It is recommended that new applications use the 'getcwd' function" verbose="Found obsolete function 'getwd'. It is recommended that new applications use the 'getcwd' function">
201 |   </error>
202 |   <error id="obsoleteFunctionsindex" severity="style" msg="Found obsolete function 'index'. It is recommended to use the function 'strchr' instead" verbose="Found obsolete function 'index'. It is recommended to use the function 'strchr' instead">
203 |   </error>
204 |   <error id="obsoleteFunctionsmakecontext" severity="style" msg="Found obsolete function 'makecontext'. Due to portability issues with this function, applications are recommended to be rewritten to use POSIX threads" verbose="Found obsolete function 'makecontext'. Due to portability issues with this function, applications are recommended to be rewritten to use POSIX threads">
205 |   </error>
206 |   <error id="obsoleteFunctionspthread_attr_getstackaddr" severity="style" msg="Found obsolete function 'pthread_attr_getstackaddr'.It is recommended that new applications use the 'pthread_attr_getstack' function" verbose="Found obsolete function 'pthread_attr_getstackaddr'.It is recommended that new applications use the 'pthread_attr_getstack' function">
207 |   </error>
208 |   <error id="obsoleteFunctionspthread_attr_setstackaddr" severity="style" msg="Found obsolete function 'pthread_attr_setstackaddr'.It is recommended that new applications use the 'pthread_attr_setstack' function" verbose="Found obsolete function 'pthread_attr_setstackaddr'.It is recommended that new applications use the 'pthread_attr_setstack' function">
209 |   </error>
210 |   <error id="obsoleteFunctionsrindex" severity="style" msg="Found obsolete function 'rindex'. It is recommended to use the function 'strrchr' instead" verbose="Found obsolete function 'rindex'. It is recommended to use the function 'strrchr' instead">
211 |   </error>
212 |   <error id="obsoleteFunctionsscalbln" severity="style" msg="Found obsolete function 'scalb'.It is recommended to use either 'scalbln', 'scalblnf' or 'scalblnl' instead of this function" verbose="Found obsolete function 'scalb'.It is recommended to use either 'scalbln', 'scalblnf' or 'scalblnl' instead of this function">
213 |   </error>
214 |   <error id="obsoleteFunctionsswapcontext" severity="style" msg="Found obsolete function 'swapcontext'. Due to portability issues with this function, applications are recommended to be rewritten to use POSIX threads" verbose="Found obsolete function 'swapcontext'. Due to portability issues with this function, applications are recommended to be rewritten to use POSIX threads">
215 |   </error>
216 |   <error id="obsoleteFunctionsualarm" severity="style" msg="Found obsolete function 'ualarm'.It is recommended to use either 'timer_create', 'timer_delete', 'timer_getoverrun', 'timer_gettime', or 'timer_settime' instead of this function" verbose="Found obsolete function 'ualarm'.It is recommended to use either 'timer_create', 'timer_delete', 'timer_getoverrun', 'timer_gettime', or 'timer_settime' instead of this function">
217 |   </error>
218 |   <error id="obsoleteFunctionsusleep" severity="style" msg="Found obsolete function 'usleep'. It is recommended that new applications use the 'nanosleep' or 'setitimer' function" verbose="Found obsolete function 'usleep'. POSIX.1-2001 declares usleep() function obsolete and POSIX.1-2008 removes it. It is recommended that new applications use the 'nanosleep' or 'setitimer' function.">
219 |   </error>
220 |   <error id="obsoleteFunctionsvfork" severity="style" msg="Found obsolete function 'vfork'. It is recommended to use the function 'fork' instead" verbose="Found obsolete function 'vfork'. It is recommended to use the function 'fork' instead">
221 |   </error>
222 |   <error id="obsoleteFunctionswcswcs" severity="style" msg="Found obsolete function 'wcswcs'. It is recommended to use the function 'wcsstr' instead" verbose="Found obsolete function 'wcswcs'. It is recommended to use the function 'wcsstr' instead">
223 |   </error>
224 |   <error id="assignBoolToPointer" severity="error" msg="Assigning bool value to pointer (converting bool value to address)" verbose="Assigning bool value to pointer (converting bool value to address)">
225 |   </error>
226 |   <error id="sprintfOverlappingData" severity="error" msg="Undefined behavior: variable is used as parameter and destination in s[n]printf()." verbose="The variable 'varname' is used both as a parameter and as a destination in s[n]printf(). The origin and destination buffers overlap. Quote from glibc (C-library) documentation (http://www.gnu.org/software/libc/manual/html_mono/libc.html#Formatted-Output-Functions): 'If copying takes place between objects that overlap as a result of a call to sprintf() or snprintf(), the results are undefined.'">
227 |   </error>
228 |   <error id="udivError" severity="error" msg="Unsigned division. The result will be wrong." verbose="Unsigned division. The result will be wrong.">
229 |   </error>
230 |   <error id="zerodiv" severity="error" msg="Division by zero" verbose="Division by zero">
231 |   </error>
232 |   <error id="wrongmathcall" severity="error" msg="Passing value  to () leads to undefined result" verbose="Passing value  to () leads to undefined result">
233 |   </error>
234 |   <error id="fflushOnInputStream" severity="error" msg="fflush() called on input stream &quot;stdin&quot; may result in undefined behaviour" verbose="fflush() called on input stream &quot;stdin&quot; may result in undefined behaviour">
235 |   </error>
236 |   <error id="unusedScopedObject" severity="error" msg="instance of &quot;varname&quot; object destroyed immediately" verbose="instance of &quot;varname&quot; object destroyed immediately">
237 |   </error>
238 |   <error id="sizeofwithsilentarraypointer" severity="error" msg="Using sizeof for array given as function argument returns the size of pointer." verbose="Giving array as function parameter and then using sizeof-operator for the array argument. In this case the sizeof-operator returns the size of pointer (in the system). It does not return the size of the whole array in bytes as might be expected. For example, this code:&#xa;     int f(char a[100]) {&#xa;         return sizeof(a);&#xa;     }&#xa; returns 4 (in 32-bit systems) or 8 (in 64-bit systems) instead of 100 (the size of the array in bytes).">
239 |   </error>
240 | 
241 |   <error id="sizeofwithnumericparameter" severity="error" msg="Using sizeof with a numeric constant as function argument might not be what you intended." verbose="It is unusual to use constant value with sizeof. For example, this code:&#xa;     int f() {&#xa;         return sizeof(10);&#xa;     }&#xa; returns 4 (in 32-bit systems) or 8 (in 64-bit systems) instead of 10.">
242 |   </error>
243 |   <error id="coutCerrMisusage" severity="error" msg="Invalid usage of output stream: '&lt;&lt; std::cout'." verbose="Invalid usage of output stream: '&lt;&lt; std::cout'.">
244 |   </error>
245 |   <error id="cstyleCast" severity="style" msg="C-style pointer casting" verbose="C-style pointer casting">
246 |   </error>
247 |   <error id="dangerousUsageStrtol" severity="error" msg="Invalid radix in call to strtol or strtoul. Must be 0 or 2-36" verbose="Invalid radix in call to strtol or strtoul. Must be 0 or 2-36">
248 |   </error>
249 |   <error id="passedByValue" severity="performance" msg="Function parameter 'parametername' should be passed by reference." verbose="Parameter 'parametername' is passed as a value. It could be passed as a (const) reference which is usually faster and recommended in C++.">
250 |   </error>
251 |   <error id="constStatement" severity="warning" msg="Redundant code: Found a statement that begins with type constant" verbose="Redundant code: Found a statement that begins with type constant">
252 |   </error>
253 |   <error id="charArrayIndex" severity="warning" msg="Using char type as array index" verbose="Using signed char type as array index. If the value can be greater than 127 there will be a buffer overflow (because of sign extension).">
254 |   </error>
255 |   <error id="charBitOp" severity="warning" msg="When using char variables in bit operations, sign extension can generate unexpected results." verbose="When using char variables in bit operations, sign extension can generate unexpected results. For example:&#xa;    char c = 0x80;&#xa;    int i = 0 | c;&#xa;    if (i &amp; 0x8000)&#xa;        printf(&quot;not expected&quot;);&#xa;The 'not expected' will be printed on the screen.">
256 |   </error>
257 |   <error id="variableScope" severity="style" msg="The scope of the variable 'varname' can be reduced" verbose="The scope of the variable 'varname' can be reduced. Warning: It can be unsafe to fix this message. Be careful. Especially when there are inner loops. Here is an example where cppcheck will write that the scope for 'i' can be reduced:&#xa;void f(int x)&#xa;{&#xa;    int i = 0;&#xa;    if (x) {&#xa;        // it's safe to move 'int i = 0' here&#xa;        for (int n = 0; n &lt; 10; ++n) {&#xa;            // it is possible but not safe to move 'int i = 0' here&#xa;            do_something(&amp;i);&#xa;        }&#xa;    }&#xa;}&#xa;When you see this message it is always safe to reduce the variable scope 1 level.">
258 |   </error>
259 |   <error id="strPlusChar" severity="error" msg="Unusual pointer arithmetic" verbose="Unusual pointer arithmetic">
260 |   </error>
261 |   <error id="sizeofsizeof" severity="warning" msg="Calling sizeof for 'sizeof'." verbose="Calling sizeof for 'sizeof looks like a suspicious code and most likely there should be just one 'sizeof'. The current code is equivalent to 'sizeof(size_t)'">
262 |   </error>
263 |   <error id="sizeofCalculation" severity="warning" msg="Found calculation inside sizeof()" verbose="Found calculation inside sizeof()">
264 |   </error>
265 |   <error id="redundantAssignInSwitch" severity="warning" msg="Redundant assignment of &quot;varname&quot; in switch" verbose="Redundant assignment of &quot;varname&quot; in switch">
266 |   </error>
267 |   <error id="switchCaseFallThrough" severity="style" msg="Switch falls through case without comment" verbose="Switch falls through case without comment">
268 |   </error>
269 |   <error id="selfAssignment" severity="warning" msg="Redundant assignment of &quot;varname&quot; to itself" verbose="Redundant assignment of &quot;varname&quot; to itself">
270 |   </error>
271 |   <error id="assignmentInAssert" severity="warning" msg="Assert statement modifies 'varname'." verbose="Variable 'varname' is modified insert assert statement. Assert statements are removed from release builds so the code inside assert statement is not run. If the code is needed also in release builds this is a bug.">
272 |   </error>
273 |   <error id="invalidscanf" severity="warning" msg="scanf without field width limits can crash with huge input data" verbose="scanf without field width limits can crash with huge input data. To fix this error message add a field width specifier:&#xa;    %s =&gt; %20s&#xa;    %i =&gt; %3i&#xa;&#xa;Sample program that can crash:&#xa;&#xa;#include &lt;stdio.h&gt;&#xa;int main()&#xa;{&#xa;    int a;&#xa;    scanf(&quot;%i&quot;, &amp;a);&#xa;    return 0;&#xa;}&#xa;&#xa;To make it crash:&#xa;perl -e 'print &quot;5&quot;x2100000' | ./a.out">
274 |   </error>
275 |   <error id="incorrectLogicOperator" severity="warning" msg="Mutual exclusion over || always evaluates to true. Did you intend to use &amp;&amp; instead?" verbose="Mutual exclusion over || always evaluates to true. Did you intend to use &amp;&amp; instead?">
276 |   </error>
277 |   <error id="secondAlwaysTrueFalseWhenFirstTrue" severity="style" msg="when first comparison is true, the 2nd comparison is always true" verbose="when first comparison is true, the 2nd comparison is always true">
278 |   </error>
279 |   <error id="catchExceptionByValue" severity="style" msg="Exception should be caught by reference." verbose="The exception is caught as a value. It could be caught as a (const) reference which is usually recommended in C++.">
280 |   </error>
281 |   <error id="memsetZeroBytes" severity="warning" msg="memset() called to fill 0 bytes of 'varname'" verbose="memset() called to fill 0 bytes of 'varname'. Second and third arguments might be inverted.">
282 |   </error>
283 |   <error id="clarifyCalculation" severity="style" msg="Clarify calculation precedence for + and ?" verbose="Suspicious calculation. Please use parentheses to clarify the code. The code 'a+b?c:d' should be written as either '(a+b)?c:d' or 'a+(b?c:d)'.">
284 |   </error>
285 |   <error id="clarifyCondition" severity="style" msg="Suspicious condition (assignment+comparison), it can be clarified with parentheses" verbose="Suspicious condition (assignment+comparison), it can be clarified with parentheses">
286 |   </error>
287 |   <error id="incorrectStringCompare" severity="warning" msg="String literal &quot;Hello World&quot; doesn't match length argument for substr(12)." verbose="String literal &quot;Hello World&quot; doesn't match length argument for substr(12).">
288 |   </error>
289 |   <error id="incorrectStringBooleanError" severity="warning" msg="A boolean comparison with the string literal &quot;Hello World&quot; is always true." verbose="A boolean comparison with the string literal &quot;Hello World&quot; is always true.">
290 |   </error>
291 |   <error id="incrementboolean" severity="style" msg="The use of a variable of type bool with the ++ postfix operator is always true and deprecated by the C++ Standard." verbose="The operand of a postfix increment operator may be of type bool but it is deprecated by C++ Standard (Annex D-1) and the operand is always set to true&#xa;">
292 |   </error>
293 |   <error id="comparisonOfBoolWithInt" severity="warning" msg="Comparison of a boolean with integer that is neither 1 nor 0" verbose="The expression &quot;varname&quot; is of type 'bool' and it is compared against a integer value that is neither 1 nor 0.">
294 |   </error>
295 |   <error id="duplicateIf" severity="style" msg="Found duplicate if expressions." verbose="Finding the same expression more than once is suspicious and might indicate a cut and paste or logic error. Please examine this code carefully to determine if it is correct.">
296 |   </error>
297 | 
298 |   <error id="duplicateExpression" severity="style" msg="Same expression on both sides of '&amp;&amp;'." verbose="Finding the same expression on both sides of an operator is suspicious and might indicate a cut and paste or logic error. Please examine this code carefully to determine if it is correct.">
299 |   </error>
300 |   <error id="stringCompare" severity="warning" msg="Comparison of identical string variables." verbose="The compared strings, 'varname1' and 'varname2', are identical. This could be a logic bug.">
301 |   </error>
302 |   <error id="duplicateBreak" severity="style" msg="Consecutive return, break, continue, goto or throw statements are unnecessary" verbose="The second of the two statements can never be executed, and so should be removed&#xa;">
303 |   </error>
304 |   <error id="unreachableCode" severity="style" msg="Statements following return, break, continue, goto or throw will never be executed" verbose="">
305 |   </error>
306 |   <error id="unsignedLessThanZero" severity="style" msg="Checking if unsigned variable 'varname' is less than zero." verbose="An unsigned variable will never be negative so it is either pointless or an error to check if it is.">
307 |   </error>
308 |   <error id="unsignedPositive" severity="style" msg="Checking if unsigned variable 'varname' is positive is always true." verbose="An unsigned variable will always be positive so it is either pointless or an error to check if it is.">
309 |   </error>
310 | 
311 |   <error id="compareBoolExpressionWithInt" severity="warning" msg="Comparison of a boolean expression with an integer other than 0 or 1." verbose="Comparison of a boolean expression with an integer other than 0 or 1.">
312 |   </error>
313 | 
314 |   <error id="wrongPrintfScanfArgs" severity="error" msg="printf format string has 3 parameters but only 2 are given" verbose="printf format string has 3 parameters but only 2 are given">
315 |   </error>
316 |   <error id="wrongcctypecall" severity="error" msg="Passing value value to funname() cause undefined behavior, which may lead to a crash" verbose="Passing value value to funname() cause undefined behavior, which may lead to a crash">
317 |   </error>
318 |   <error id="invalidIterator1" severity="error" msg="Invalid iterator: iterator" verbose="Invalid iterator: iterator">
319 |   </error>
320 |   <error id="iterators" severity="error" msg="Same iterator is used with both container1 and container2" verbose="Same iterator is used with both container1 and container2">
321 |   </error>
322 |   <error id="mismatchingContainers" severity="error" msg="mismatching containers" verbose="mismatching containers">
323 |   </error>
324 |   <error id="eraseDereference" severity="error" msg="Dereferenced iterator 'iter' has been erased" verbose="Dereferenced iterator 'iter' has been erased">
325 |   </error>
326 |   <error id="stlOutOfBounds" severity="error" msg="When i==foo.size(), foo[i] is out of bounds" verbose="When i==foo.size(), foo[i] is out of bounds">
327 |   </error>
328 |   <error id="erase" severity="error" msg="Dangerous iterator usage after erase()-method." verbose="The iterator is invalid after it has been used in erase() function. Dereferencing or comparing it with another iterator is invalid operation.">
329 |   </error>
330 |   <error id="invalidIterator2" severity="error" msg="After push_back|push_front|insert, the iterator 'iterator' may be invalid" verbose="After push_back|push_front|insert, the iterator 'iterator' may be invalid">
331 |   </error>
332 |   <error id="invalidPointer" severity="error" msg="Invalid pointer 'pointer' after push_back / push_front" verbose="Invalid pointer 'pointer' after push_back / push_front">
333 |   </error>
334 |   <error id="stlBoundries" severity="error" msg="Dangerous container iterator compare using &lt; operator for container" verbose="Container 'container' iterator compared with &lt; operator. Using &lt; operator with container type iterators is dangerous since the order of the items is not guaranteed. One should use != operator instead when comparing iterators in the container.">
335 |   </error>
336 |   <error id="stlIfFind" severity="warning" msg="Suspicious condition. The result of find is an iterator, but it is not properly checked." verbose="Suspicious condition. The result of find is an iterator, but it is not properly checked.">
337 |   </error>
338 |   <error id="stlIfStrFind" severity="warning" msg="Suspicious checking of string::find() return value." verbose="Checking of string::find() return value looks Suspicious. string::find will return 0 if the string is found at position 0. If that is wanted to check then string::compare is a faster alternative because it doesn't scan through the string.">
339 |   </error>
340 |   <error id="stlcstr" severity="error" msg="Dangerous usage of c_str(). The returned value by c_str() is invalid after this call." verbose="Dangerous usage of c_str(). The c_str() return value is only valid until its string is deleted.">
341 |   </error>
342 |   <error id="stlSize" severity="performance" msg="Possible inefficient checking for 'list' emptiness." verbose="Checking for 'list' emptiness might be inefficient. Using list.empty() instead of list.size() can be faster. list.size() can take linear time but list.empty() is guaranteed to take constant time.">
343 |   </error>
344 |   <error id="redundantIfRemove" severity="style" msg="Redundant checking of STL container element." verbose="Redundant checking of STL container element existence before removing it. The remove method in the STL will not do anything if element doesn't exist">
345 |   </error>
346 |   <error id="useAutoPointerCopy" severity="style" msg="Copy 'auto_ptr' pointer to another do not create two equal objects since one has lost its ownership of the pointer." verbose="The auto_ptr has semantics of strict ownership, meaning that the auto_ptr instance is the sole entity responsible for the object's lifetime. If an auto_ptr is copied, the source loses the reference.">
347 |   </error>
348 |   <error id="useAutoPointerContainer" severity="error" msg="You can randomly lose access to pointers if you store 'auto_ptr' pointers in a container because the copy-semantics of 'auto_ptr' are not compatible with containers." verbose="An element of container must be able to be copied but 'auto_ptr' does not fulfill this requirement. You should consider to use 'shared_ptr' or 'unique_ptr'. It is suitable for use in containers, because they no longer copy their values, they move them.">
349 |   </error>
350 |   <error id="useAutoPointerArray" severity="error" msg="Object pointed by an 'auto_ptr' is destroyed using operator 'delete'. You should not use 'auto_ptr' for pointers obtained with operator 'new[]'." verbose="Object pointed by an 'auto_ptr' is destroyed using operator 'delete'. This means that you should only use 'auto_ptr' for pointers obtained with operator 'new'. This excludes arrays, which are allocated by operator 'new[]' and must be deallocated by operator 'delete[]'.">
351 |   </error>
352 |   <error id="uselessCallsCompare" severity="warning" msg="It is inefficient to call 'str.find(str)' as it always returns 0." verbose="The 'std::string::find()' returns zero when given itself as parameter (str.find(str)). As it is currently the code is inefficient. It is also possible either the string searched ('str') or searched for ('str') is wrong/mixed in the code?">
353 |   </error>
354 |   <error id="uselessCallsSwap" severity="performance" msg="It is inefficient to swap a object with itself by calling 'str.swap(str)'" verbose="The 'swap()' function has no logical effect when given itself as parameter (str.swap(str)). As it is currently the code is inefficient. It is possible either the object or the parameter is wrong/mixed in the code?">
355 |   </error>
356 |   <error id="uselessCallsSubstr" severity="performance" msg="Function 'substr' useless call. Function create copy of the 'str' object." verbose="Function 'substr' useless call. 'substr' function create copy of the whole 'str' object which can decrease in performance. Please use '=' operator instead.">
357 |   </error>
358 |   <error id="uninitstring" severity="error" msg="Dangerous usage of 'varname' (strncpy doesn't always 0-terminate it)" verbose="Dangerous usage of 'varname' (strncpy doesn't always 0-terminate it)">
359 |   </error>
360 |   <error id="uninitdata" severity="error" msg="Data is allocated but not initialized: varname" verbose="Data is allocated but not initialized: varname">
361 |   </error>
362 |   <error id="uninitvar" severity="error" msg="Uninitialized variable: varname" verbose="Uninitialized variable: varname">
363 |   </error>
364 |   <error id="unusedFunction" severity="style" msg="The function 'funcName' is never used" verbose="The function 'funcName' is never used">
365 |   </error>
366 |   <error id="unusedVariable" severity="style" msg="Unused variable: varname" verbose="Unused variable: varname">
367 |   </error>
368 |   <error id="unusedAllocatedMemory" severity="style" msg="Variable 'varname' is allocated memory that is never used" verbose="Variable 'varname' is allocated memory that is never used">
369 |   </error>
370 |   <error id="unreadVariable" severity="style" msg="Variable 'varname' is assigned a value that is never used" verbose="Variable 'varname' is assigned a value that is never used">
371 |   </error>
372 |   <error id="unassignedVariable" severity="style" msg="Variable 'varname' is not assigned a value" verbose="Variable 'varname' is not assigned a value">
373 |   </error>
374 |   <error id="unusedStructMember" severity="style" msg="struct or union member 'structname::variable' is never used" verbose="struct or union member 'structname::variable' is never used">
375 |   </error>
376 |   <error id="postfixOperator" severity="performance" msg="Prefer prefix ++/-- operators for non-primitive types." verbose="Prefix ++/-- operators should be preferred for non-primitive types. Pre-increment/decrement can be more efficient than post-increment/decrement. Post-increment/decrement usually involves keeping a copy of the previous value around and adds a little extra code.">
377 |   </error>
378 |   <error id="syntaxError" severity="error" msg="Invalid number of character ( ) when these macros are defined: ''." verbose="Invalid number of character ( ) when these macros are defined: ''.">
379 |   </error>
380 |   <error id="cppcheckError" severity="error" msg="Analysis failed. If the code is valid then please report this failure." verbose="Analysis failed. If the code is valid then please report this failure.">
381 |   </error>
382 | 
383 |   <error id="unnecessaryForwardDeclaration" severity="style" msg="Variable 'name' forward declaration unnecessary, already declared" verbose="Variable 'name' forward declaration unnecessary, already declared">
384 |   </error>
385 |   <error id="variableHidingEnum" severity="style" msg="Variable 'name' hides enumerator with same name" verbose="Variable 'name' hides enumerator with same name">
386 |   </error>
387 |   <error id="unnecessaryQualification" severity="portability" msg="Extra qualification 'type' unnecessary and considered an error by many compilers." verbose="Extra qualification 'type' unnecessary and considered an error by many compilers.">
388 |   </error>
389 |   <error id="missingInclude" severity="information" msg="Include file: &quot;&quot; not found." verbose="Include file: &quot;&quot; not found.">
390 |   </error>
391 |   <error id="preprocessorErrorDirective" severity="error" msg="#error message" verbose="#error message">
392 |   </error>
393 |   </errors>
394 | </results>
395 | 


--------------------------------------------------------------------------------
/src/main/files/cppcheck-1.53.xml:
--------------------------------------------------------------------------------
  1 | <?xml version="1.0" encoding="UTF-8"?>
  2 | <results version="2">
  3 |   <cppcheck version="1.53"/>
  4 |   <errors>  <error id="AssignmentAddressToInteger" severity="portability" msg="Assigning an address value to the integer (int/long/etc) type is not portable" verbose="Assigning an address value to the integer (int/long/etc) type is not portable across different platforms and compilers. For example in 32-bit Windows and linux they are same width, but in 64-bit Windows and linux they are of different width. In worst case you end up assigning 64-bit address to 32-bit integer. The safe way is to always assign addresses only to pointer types (or typedefs).">
  5 |   </error>
  6 |   <error id="AssignmentIntegerToAddress" severity="portability" msg="Assigning an integer (int/long/etc) to a pointer is not portable" verbose="Assigning an integer (int/long/etc) to a pointer is not portable across different platforms and compilers. For example in 32-bit Windows and linux they are same width, but in 64-bit Windows and linux they are of different width. In worst case you end up assigning 32-bit integer to 64-bit pointer. The safe way is to always assign address to pointer.">
  7 |   </error>
  8 |   <error id="autoVariables" severity="error" msg="Assigning address of local auto-variable to a function parameter." verbose="Dangerous assignment - function parameter takes the address of a local auto-variable. Local auto-variables are reserved from the stack. And the stack is freed when the function ends. So the pointer to a local variable is invalid after the function ends.">
  9 |   </error>
 10 |   <error id="returnAddressOfAutoVariable" severity="error" msg="Return of the address of an auto-variable" verbose="Return of the address of an auto-variable">
 11 |   </error>
 12 |   <error id="returnLocalVariable" severity="error" msg="Returning pointer to local array variable" verbose="Returning pointer to local array variable">
 13 |   </error>
 14 |   <error id="returnReference" severity="error" msg="Returning reference to auto variable" verbose="Returning reference to auto variable">
 15 |   </error>
 16 |   <error id="returnTempReference" severity="error" msg="Returning reference to temporary" verbose="Returning reference to temporary">
 17 |   </error>
 18 |   <error id="returnAutocstr" severity="error" msg="Returning pointer to auto variable" verbose="Returning pointer to auto variable">
 19 |   </error>
 20 |   <error id="returnTempPointer" severity="error" msg="Returning pointer to temporary" verbose="Returning pointer to temporary">
 21 |   </error>
 22 |   <error id="autovarInvalidDeallocation" severity="error" msg="Deallocating auto-variable is invalid" verbose="Deallocating an auto-variable is invalid. You should only free memory that has been allocated dynamically.">
 23 |   </error>
 24 |   <error id="returnAddressOfFunctionParameter" severity="error" msg="Return the address of function parameter 'parameter'" verbose="Address of the function parameter 'parameter' is invalid after the function exits. Function parameters are created into the stack. When the function exits the stack is deleted.">
 25 |   </error>
 26 |   <error id="boostForeachError" severity="error" msg="BOOST_FOREACH caches the end() iterator. It's undefined behavior if you modify the container." verbose="BOOST_FOREACH caches the end() iterator. It's undefined behavior if you modify the container.">
 27 |   </error>
 28 |   <error id="arrayIndexOutOfBounds" severity="error" msg="Array 'array[2]' index 2 out of bounds" verbose="Array 'array[2]' index 2 out of bounds">
 29 |   </error>
 30 |   <error id="bufferAccessOutOfBounds" severity="error" msg="Buffer access out-of-bounds: buffer" verbose="Buffer access out-of-bounds: buffer">
 31 |   </error>
 32 |   <error id="outOfBounds" severity="error" msg="index is out of bounds: Supplied size 2 is larger than actual size of 1" verbose="index is out of bounds: Supplied size 2 is larger than actual size of 1">
 33 |   </error>
 34 |   <error id="terminateStrncpy" severity="warning" msg="The buffer 'buffer' may not be zero-terminated after the call to strncpy()." verbose="The use of strncpy() usually indicates that the programmer wants to ensure the buffer is zero-terminated after the call. However if the (buffer) size given for the strncpy() call matches the actual buffer size strncpy() does not add the zero at the end of the buffer. This may cause bugs later in the code if the code assumes buffer is zero-terminated.">
 35 |   </error>
 36 | 
 37 |   <error id="negativeIndex" severity="error" msg="Array index -1 is out of bounds" verbose="Array index -1 is out of bounds">
 38 |   </error>
 39 |   <error id="insecureCmdLineArgs" severity="error" msg="Buffer overrun possible for long cmd-line args" verbose="Buffer overrun possible for long cmd-line args">
 40 |   </error>
 41 |   <error id="pointerOutOfBounds" severity="portability" msg="Undefined behaviour: pointer arithmetic result does not point into or just past the end of the array" verbose="Undefined behaviour: Using pointer arithmetic so that the result does not point into or just past the end of the same object. Further information: https://www.securecoding.cert.org/confluence/display/seccode/ARR30-C.+Do+not+form+or+use+out+of+bounds+pointers+or+array+subscripts">
 42 |   </error>
 43 |   <error id="arrayIndexThenCheck" severity="style" msg="Array index index is used before limits check" verbose="Defensive programming: The variable index is used as array index and then there is a check that it is within limits. This can mean that the array might be accessed out-of-bounds. Reorder conditions such as '(a[i] &amp;&amp; i &lt; 10)' to '(i &lt; 10 &amp;&amp; a[i])'. That way the array will not be accessed when the index is out of limits.">
 44 |   </error>
 45 |   <error id="possibleBufferAccessOutOfBounds" severity="warning" msg="Possible buffer overflow if strlen(source) is larger than or equal to sizeof(destination)." verbose="The source buffer is larger than the destination buffer so there is the potential for overflowing the destination buffer.">
 46 |   </error>
 47 | 
 48 |   <error id="noConstructor" severity="style" msg="The class 'classname' does not have a constructor." verbose="The class 'classname 'does not have a constructor but it has attributes. The attributes are not initialized which may cause bugs or undefined behavior.">
 49 |   </error>
 50 |   <error id="uninitVar" severity="warning" msg="Member variable 'classname::varname' is not initialized in the constructor." verbose="Member variable 'classname::varname' is not initialized in the constructor.">
 51 |   </error>
 52 |   <error id="operatorEqVarError" severity="warning" msg="Member variable 'classname::' is not assigned a value in 'classname::operator='" verbose="Member variable 'classname::' is not assigned a value in 'classname::operator='">
 53 |   </error>
 54 |   <error id="unusedPrivateFunction" severity="style" msg="Unused private function 'classname::funcname'" verbose="Unused private function 'classname::funcname'">
 55 |   </error>
 56 |   <error id="memsetClass" severity="error" msg="Using 'memfunc' on class that contains a classname" verbose="Using 'memfunc' on class that contains a classname">
 57 |   </error>
 58 |   <error id="operatorEq" severity="style" msg="'class::operator=' should return 'class &amp;'" verbose="'class::operator=' should return 'class &amp;'">
 59 |   </error>
 60 |   <error id="thisSubtraction" severity="warning" msg="Suspicious pointer subtraction" verbose="Suspicious pointer subtraction">
 61 |   </error>
 62 |   <error id="operatorEqRetRefThis" severity="style" msg="'operator=' should return reference to self" verbose="'operator=' should return reference to self">
 63 |   </error>
 64 |   <error id="operatorEqToSelf" severity="warning" msg="'operator=' should check for assignment to self" verbose="'operator=' should check for assignment to self">
 65 |   </error>
 66 | 
 67 |   <error id="initializerList" severity="style" msg="Member variable 'class::variable' is in the wrong order in the initializer list." verbose="Members are initialized in the order they are declared, not the order they are in the initializer list.  Keeping the initializer list in the same order that the members were declared prevents order dependent initialization errors.">
 68 |   </error>
 69 |   <error id="exceptThrowInDestructor" severity="error" msg="Throwing exception in destructor" verbose="Throwing exception in destructor">
 70 |   </error>
 71 |   <error id="exceptDeallocThrow" severity="warning" msg="Throwing exception in invalid state, p points at deallocated memory" verbose="Throwing exception in invalid state, p points at deallocated memory">
 72 |   </error>
 73 |   <error id="exceptRethrowCopy" severity="style" msg="Throwing a copy of the caught exception instead of rethrowing the original exception" verbose="Rethrowing an exception with 'throw varname;' makes an unnecessary copy of 'varname'.&#xa;To rethrow the caught exception without unnecessary copying or slicing, use a bare 'throw;'.">
 74 |   </error>
 75 |   <error id="catchExceptionByValue" severity="style" msg="Exception should be caught by reference." verbose="The exception is caught as a value. It could be caught as a (const) reference which is usually recommended in C++.">
 76 |   </error>
 77 |   <error id="assignIfError" severity="style" msg="Mismatching assignment and comparison, comparison is always false" verbose="Mismatching assignment and comparison, comparison is always false">
 78 |   </error>
 79 |   <error id="comparisonError" severity="style" msg="Expression '(X &amp; 0x6) == 0x1' is always false" verbose="The expression '(X &amp; 0x6) == 0x1' is always false. Check carefully constants and operators used, these errors might be hard to spot sometimes. In case of complex expression it might help to split it to separate expressions.">
 80 |   </error>
 81 |   <error id="multiCondition" severity="style" msg="'else if' condition matches previous condition at line 1" verbose="'else if' condition matches previous condition at line 1">
 82 |   </error>
 83 |   <error id="memleak" severity="error" msg="Memory leak: varname" verbose="Memory leak: varname">
 84 |   </error>
 85 |   <error id="resourceLeak" severity="error" msg="Resource leak: varname" verbose="Resource leak: varname">
 86 |   </error>
 87 |   <error id="deallocDealloc" severity="error" msg="Deallocating a deallocated pointer: varname" verbose="Deallocating a deallocated pointer: varname">
 88 |   </error>
 89 |   <error id="deallocuse" severity="error" msg="Dereferencing 'varname' after it is deallocated / released" verbose="Dereferencing 'varname' after it is deallocated / released">
 90 |   </error>
 91 |   <error id="mismatchSize" severity="error" msg="The given size sz is mismatching" verbose="The given size sz is mismatching">
 92 |   </error>
 93 |   <error id="mismatchAllocDealloc" severity="error" msg="Mismatching allocation and deallocation: varname" verbose="Mismatching allocation and deallocation: varname">
 94 |   </error>
 95 |   <error id="memleakOnRealloc" severity="error" msg="Common realloc mistake: 'varname' nulled but not freed upon failure" verbose="Common realloc mistake: 'varname' nulled but not freed upon failure">
 96 |   </error>
 97 |   <error id="nonreentrantFunctionscrypt" severity="portability" msg="Found non reentrant function 'crypt'. For threadsafe applications it is recommended to use the reentrant replacement function 'crypt_r'" verbose="Found non reentrant function 'crypt'. For threadsafe applications it is recommended to use the reentrant replacement function 'crypt_r'">
 98 |   </error>
 99 |   <error id="nonreentrantFunctionsctermid" severity="portability" msg="Found non reentrant function 'ctermid'. For threadsafe applications it is recommended to use the reentrant replacement function 'ctermid_r'" verbose="Found non reentrant function 'ctermid'. For threadsafe applications it is recommended to use the reentrant replacement function 'ctermid_r'">
100 |   </error>
101 |   <error id="nonreentrantFunctionsecvt" severity="portability" msg="Found non reentrant function 'ecvt'. For threadsafe applications it is recommended to use the reentrant replacement function 'ecvt_r'" verbose="Found non reentrant function 'ecvt'. For threadsafe applications it is recommended to use the reentrant replacement function 'ecvt_r'">
102 |   </error>
103 |   <error id="nonreentrantFunctionsfcvt" severity="portability" msg="Found non reentrant function 'fcvt'. For threadsafe applications it is recommended to use the reentrant replacement function 'fcvt_r'" verbose="Found non reentrant function 'fcvt'. For threadsafe applications it is recommended to use the reentrant replacement function 'fcvt_r'">
104 |   </error>
105 |   <error id="nonreentrantFunctionsfgetgrent" severity="portability" msg="Found non reentrant function 'fgetgrent'. For threadsafe applications it is recommended to use the reentrant replacement function 'fgetgrent_r'" verbose="Found non reentrant function 'fgetgrent'. For threadsafe applications it is recommended to use the reentrant replacement function 'fgetgrent_r'">
106 |   </error>
107 |   <error id="nonreentrantFunctionsfgetpwent" severity="portability" msg="Found non reentrant function 'fgetpwent'. For threadsafe applications it is recommended to use the reentrant replacement function 'fgetpwent_r'" verbose="Found non reentrant function 'fgetpwent'. For threadsafe applications it is recommended to use the reentrant replacement function 'fgetpwent_r'">
108 |   </error>
109 |   <error id="nonreentrantFunctionsfgetspent" severity="portability" msg="Found non reentrant function 'fgetspent'. For threadsafe applications it is recommended to use the reentrant replacement function 'fgetspent_r'" verbose="Found non reentrant function 'fgetspent'. For threadsafe applications it is recommended to use the reentrant replacement function 'fgetspent_r'">
110 |   </error>
111 |   <error id="nonreentrantFunctionsgcvt" severity="portability" msg="Found non reentrant function 'gcvt'. For threadsafe applications it is recommended to use the reentrant replacement function 'gcvt_r'" verbose="Found non reentrant function 'gcvt'. For threadsafe applications it is recommended to use the reentrant replacement function 'gcvt_r'">
112 |   </error>
113 |   <error id="nonreentrantFunctionsgetgrent" severity="portability" msg="Found non reentrant function 'getgrent'. For threadsafe applications it is recommended to use the reentrant replacement function 'getgrent_r'" verbose="Found non reentrant function 'getgrent'. For threadsafe applications it is recommended to use the reentrant replacement function 'getgrent_r'">
114 |   </error>
115 |   <error id="nonreentrantFunctionsgetgrgid" severity="portability" msg="Found non reentrant function 'getgrgid'. For threadsafe applications it is recommended to use the reentrant replacement function 'getgrgid_r'" verbose="Found non reentrant function 'getgrgid'. For threadsafe applications it is recommended to use the reentrant replacement function 'getgrgid_r'">
116 |   </error>
117 |   <error id="nonreentrantFunctionsgetgrnam" severity="portability" msg="Found non reentrant function 'getgrnam'. For threadsafe applications it is recommended to use the reentrant replacement function 'getgrnam_r'" verbose="Found non reentrant function 'getgrnam'. For threadsafe applications it is recommended to use the reentrant replacement function 'getgrnam_r'">
118 |   </error>
119 |   <error id="nonreentrantFunctionsgethostbyaddr" severity="portability" msg="Found non reentrant function 'gethostbyaddr'. For threadsafe applications it is recommended to use the reentrant replacement function 'gethostbyaddr_r'" verbose="Found non reentrant function 'gethostbyaddr'. For threadsafe applications it is recommended to use the reentrant replacement function 'gethostbyaddr_r'">
120 |   </error>
121 |   <error id="nonreentrantFunctionsgethostbyname" severity="portability" msg="Found non reentrant function 'gethostbyname'. For threadsafe applications it is recommended to use the reentrant replacement function 'gethostbyname_r'" verbose="Found non reentrant function 'gethostbyname'. For threadsafe applications it is recommended to use the reentrant replacement function 'gethostbyname_r'">
122 |   </error>
123 |   <error id="nonreentrantFunctionsgethostbyname2" severity="portability" msg="Found non reentrant function 'gethostbyname2'. For threadsafe applications it is recommended to use the reentrant replacement function 'gethostbyname2_r'" verbose="Found non reentrant function 'gethostbyname2'. For threadsafe applications it is recommended to use the reentrant replacement function 'gethostbyname2_r'">
124 |   </error>
125 |   <error id="nonreentrantFunctionsgethostent" severity="portability" msg="Found non reentrant function 'gethostent'. For threadsafe applications it is recommended to use the reentrant replacement function 'gethostent_r'" verbose="Found non reentrant function 'gethostent'. For threadsafe applications it is recommended to use the reentrant replacement function 'gethostent_r'">
126 |   </error>
127 |   <error id="nonreentrantFunctionsgetlogin" severity="portability" msg="Found non reentrant function 'getlogin'. For threadsafe applications it is recommended to use the reentrant replacement function 'getlogin_r'" verbose="Found non reentrant function 'getlogin'. For threadsafe applications it is recommended to use the reentrant replacement function 'getlogin_r'">
128 |   </error>
129 |   <error id="nonreentrantFunctionsgetnetbyaddr" severity="portability" msg="Found non reentrant function 'getnetbyaddr'. For threadsafe applications it is recommended to use the reentrant replacement function 'getnetbyaddr_r'" verbose="Found non reentrant function 'getnetbyaddr'. For threadsafe applications it is recommended to use the reentrant replacement function 'getnetbyaddr_r'">
130 |   </error>
131 |   <error id="nonreentrantFunctionsgetnetbyname" severity="portability" msg="Found non reentrant function 'getnetbyname'. For threadsafe applications it is recommended to use the reentrant replacement function 'getnetbyname_r'" verbose="Found non reentrant function 'getnetbyname'. For threadsafe applications it is recommended to use the reentrant replacement function 'getnetbyname_r'">
132 |   </error>
133 |   <error id="nonreentrantFunctionsgetnetgrent" severity="portability" msg="Found non reentrant function 'getnetgrent'. For threadsafe applications it is recommended to use the reentrant replacement function 'getnetgrent_r'" verbose="Found non reentrant function 'getnetgrent'. For threadsafe applications it is recommended to use the reentrant replacement function 'getnetgrent_r'">
134 |   </error>
135 |   <error id="nonreentrantFunctionsgetprotobyname" severity="portability" msg="Found non reentrant function 'getprotobyname'. For threadsafe applications it is recommended to use the reentrant replacement function 'getprotobyname_r'" verbose="Found non reentrant function 'getprotobyname'. For threadsafe applications it is recommended to use the reentrant replacement function 'getprotobyname_r'">
136 |   </error>
137 |   <error id="nonreentrantFunctionsgetpwent" severity="portability" msg="Found non reentrant function 'getpwent'. For threadsafe applications it is recommended to use the reentrant replacement function 'getpwent_r'" verbose="Found non reentrant function 'getpwent'. For threadsafe applications it is recommended to use the reentrant replacement function 'getpwent_r'">
138 |   </error>
139 |   <error id="nonreentrantFunctionsgetpwnam" severity="portability" msg="Found non reentrant function 'getpwnam'. For threadsafe applications it is recommended to use the reentrant replacement function 'getpwnam_r'" verbose="Found non reentrant function 'getpwnam'. For threadsafe applications it is recommended to use the reentrant replacement function 'getpwnam_r'">
140 |   </error>
141 |   <error id="nonreentrantFunctionsgetpwuid" severity="portability" msg="Found non reentrant function 'getpwuid'. For threadsafe applications it is recommended to use the reentrant replacement function 'getpwuid_r'" verbose="Found non reentrant function 'getpwuid'. For threadsafe applications it is recommended to use the reentrant replacement function 'getpwuid_r'">
142 |   </error>
143 |   <error id="nonreentrantFunctionsgetrpcbyname" severity="portability" msg="Found non reentrant function 'getrpcbyname'. For threadsafe applications it is recommended to use the reentrant replacement function 'getrpcbyname_r'" verbose="Found non reentrant function 'getrpcbyname'. For threadsafe applications it is recommended to use the reentrant replacement function 'getrpcbyname_r'">
144 |   </error>
145 |   <error id="nonreentrantFunctionsgetrpcbynumber" severity="portability" msg="Found non reentrant function 'getrpcbynumber'. For threadsafe applications it is recommended to use the reentrant replacement function 'getrpcbynumber_r'" verbose="Found non reentrant function 'getrpcbynumber'. For threadsafe applications it is recommended to use the reentrant replacement function 'getrpcbynumber_r'">
146 |   </error>
147 |   <error id="nonreentrantFunctionsgetrpcent" severity="portability" msg="Found non reentrant function 'getrpcent'. For threadsafe applications it is recommended to use the reentrant replacement function 'getrpcent_r'" verbose="Found non reentrant function 'getrpcent'. For threadsafe applications it is recommended to use the reentrant replacement function 'getrpcent_r'">
148 |   </error>
149 |   <error id="nonreentrantFunctionsgetservbyname" severity="portability" msg="Found non reentrant function 'getservbyname'. For threadsafe applications it is recommended to use the reentrant replacement function 'getservbyname_r'" verbose="Found non reentrant function 'getservbyname'. For threadsafe applications it is recommended to use the reentrant replacement function 'getservbyname_r'">
150 |   </error>
151 |   <error id="nonreentrantFunctionsgetservbyport" severity="portability" msg="Found non reentrant function 'getservbyport'. For threadsafe applications it is recommended to use the reentrant replacement function 'getservbyport_r'" verbose="Found non reentrant function 'getservbyport'. For threadsafe applications it is recommended to use the reentrant replacement function 'getservbyport_r'">
152 |   </error>
153 |   <error id="nonreentrantFunctionsgetservent" severity="portability" msg="Found non reentrant function 'getservent'. For threadsafe applications it is recommended to use the reentrant replacement function 'getservent_r'" verbose="Found non reentrant function 'getservent'. For threadsafe applications it is recommended to use the reentrant replacement function 'getservent_r'">
154 |   </error>
155 |   <error id="nonreentrantFunctionsgetspent" severity="portability" msg="Found non reentrant function 'getspent'. For threadsafe applications it is recommended to use the reentrant replacement function 'getspent_r'" verbose="Found non reentrant function 'getspent'. For threadsafe applications it is recommended to use the reentrant replacement function 'getspent_r'">
156 |   </error>
157 |   <error id="nonreentrantFunctionsgetspnam" severity="portability" msg="Found non reentrant function 'getspnam'. For threadsafe applications it is recommended to use the reentrant replacement function 'getspnam_r'" verbose="Found non reentrant function 'getspnam'. For threadsafe applications it is recommended to use the reentrant replacement function 'getspnam_r'">
158 |   </error>
159 |   <error id="nonreentrantFunctionsgmtime" severity="portability" msg="Found non reentrant function 'gmtime'. For threadsafe applications it is recommended to use the reentrant replacement function 'gmtime_r'" verbose="Found non reentrant function 'gmtime'. For threadsafe applications it is recommended to use the reentrant replacement function 'gmtime_r'">
160 |   </error>
161 |   <error id="nonreentrantFunctionslocaltime" severity="portability" msg="Found non reentrant function 'localtime'. For threadsafe applications it is recommended to use the reentrant replacement function 'localtime_r'" verbose="Found non reentrant function 'localtime'. For threadsafe applications it is recommended to use the reentrant replacement function 'localtime_r'">
162 |   </error>
163 |   <error id="nonreentrantFunctionsreaddir" severity="portability" msg="Found non reentrant function 'readdir'. For threadsafe applications it is recommended to use the reentrant replacement function 'readdir_r'" verbose="Found non reentrant function 'readdir'. For threadsafe applications it is recommended to use the reentrant replacement function 'readdir_r'">
164 |   </error>
165 |   <error id="nonreentrantFunctionsstrtok" severity="portability" msg="Found non reentrant function 'strtok'. For threadsafe applications it is recommended to use the reentrant replacement function 'strtok_r'" verbose="Found non reentrant function 'strtok'. For threadsafe applications it is recommended to use the reentrant replacement function 'strtok_r'">
166 |   </error>
167 |   <error id="nonreentrantFunctionstempnam" severity="portability" msg="Found non reentrant function 'tempnam'. For threadsafe applications it is recommended to use the reentrant replacement function 'tempnam_r'" verbose="Found non reentrant function 'tempnam'. For threadsafe applications it is recommended to use the reentrant replacement function 'tempnam_r'">
168 |   </error>
169 |   <error id="nonreentrantFunctionsttyname" severity="portability" msg="Found non reentrant function 'ttyname'. For threadsafe applications it is recommended to use the reentrant replacement function 'ttyname_r'" verbose="Found non reentrant function 'ttyname'. For threadsafe applications it is recommended to use the reentrant replacement function 'ttyname_r'">
170 |   </error>
171 |   <error id="nullPointer" severity="error" msg="Possible null pointer dereference: pointer" verbose="Possible null pointer dereference: pointer">
172 |   </error>
173 |   <error id="obsoleteFunctionsasctime" severity="style" msg="Found obsolete function 'asctime'. It is recommended to use the function 'strftime' instead" verbose="Found obsolete function 'asctime'. It is recommended to use the function 'strftime' instead">
174 |   </error>
175 |   <error id="obsoleteFunctionsasctime_r" severity="style" msg="Found obsolete function 'asctime_r'. It is recommended to use the function 'strftime' instead" verbose="Found obsolete function 'asctime_r'. It is recommended to use the function 'strftime' instead">
176 |   </error>
177 |   <error id="obsoleteFunctionsbcmp" severity="style" msg="Found obsolete function 'bcmp'. It is recommended that new applications use the 'memcmp' function" verbose="Found obsolete function 'bcmp'. It is recommended that new applications use the 'memcmp' function">
178 |   </error>
179 |   <error id="obsoleteFunctionsbcopy" severity="style" msg="Found obsolete function 'bcopy'. It is recommended that new applications use the 'memmove' or 'memcpy' functions" verbose="Found obsolete function 'bcopy'. It is recommended that new applications use the 'memmove' or 'memcpy' functions">
180 |   </error>
181 |   <error id="obsoleteFunctionsbsd_signal" severity="style" msg="Found obsolete function 'bsd_signal'. It is recommended that new applications use the 'sigaction' function" verbose="Found obsolete function 'bsd_signal'. It is recommended that new applications use the 'sigaction' function">
182 |   </error>
183 |   <error id="obsoleteFunctionsbzero" severity="style" msg="Found obsolete function 'bzero'. It is recommended that new applications use the 'memset' function" verbose="Found obsolete function 'bzero'. It is recommended that new applications use the 'memset' function">
184 |   </error>
185 |   <error id="obsoleteFunctionsctime" severity="style" msg="Found obsolete function 'ctime'. It is recommended to use the function 'strftime' instead" verbose="Found obsolete function 'ctime'. It is recommended to use the function 'strftime' instead">
186 |   </error>
187 |   <error id="obsoleteFunctionsecvt" severity="style" msg="Found obsolete function 'ecvt'. It is recommended that new applications use the 'sprintf' function" verbose="Found obsolete function 'ecvt'. It is recommended that new applications use the 'sprintf' function">
188 |   </error>
189 |   <error id="obsoleteFunctionsfcvt" severity="style" msg="Found obsolete function 'fcvt'. It is recommended that new applications use the 'sprintf' function" verbose="Found obsolete function 'fcvt'. It is recommended that new applications use the 'sprintf' function">
190 |   </error>
191 |   <error id="obsoleteFunctionsftime" severity="style" msg="Found obsolete function 'ftime'." verbose="It is recommended that new applications use time(), gettimeofday(), or clock_gettime() instead. For high-resolution timing on Windows, QueryPerformanceCounter() and QueryPerformanceFrequency may be used.">
192 |   </error>
193 |   <error id="obsoleteFunctionsgcvt" severity="style" msg="Found obsolete function 'gcvt'. It is recommended that new applications use the 'sprintf' function" verbose="Found obsolete function 'gcvt'. It is recommended that new applications use the 'sprintf' function">
194 |   </error>
195 |   <error id="obsoleteFunctionsgetcontext" severity="style" msg="Found obsolete function 'getcontext'. Due to portability issues with this function, applications are recommended to be rewritten to use POSIX threads" verbose="Found obsolete function 'getcontext'. Due to portability issues with this function, applications are recommended to be rewritten to use POSIX threads">
196 |   </error>
197 |   <error id="obsoleteFunctionsgethostbyaddr" severity="style" msg="Found obsolete function 'gethostbyaddr'. It is recommended that new applications use the 'getnameinfo' function" verbose="Found obsolete function 'gethostbyaddr'. It is recommended that new applications use the 'getnameinfo' function">
198 |   </error>
199 |   <error id="obsoleteFunctionsgethostbyname" severity="style" msg="Found obsolete function 'gethostbyname'. It is recommended that new applications use the 'getaddrinfo' function" verbose="Found obsolete function 'gethostbyname'. It is recommended that new applications use the 'getaddrinfo' function">
200 |   </error>
201 |   <error id="obsoleteFunctionsgetwd" severity="style" msg="Found obsolete function 'getwd'. It is recommended that new applications use the 'getcwd' function" verbose="Found obsolete function 'getwd'. It is recommended that new applications use the 'getcwd' function">
202 |   </error>
203 |   <error id="obsoleteFunctionsindex" severity="style" msg="Found obsolete function 'index'. It is recommended to use the function 'strchr' instead" verbose="Found obsolete function 'index'. It is recommended to use the function 'strchr' instead">
204 |   </error>
205 |   <error id="obsoleteFunctionsmakecontext" severity="style" msg="Found obsolete function 'makecontext'. Due to portability issues with this function, applications are recommended to be rewritten to use POSIX threads" verbose="Found obsolete function 'makecontext'. Due to portability issues with this function, applications are recommended to be rewritten to use POSIX threads">
206 |   </error>
207 |   <error id="obsoleteFunctionspthread_attr_getstackaddr" severity="style" msg="Found obsolete function 'pthread_attr_getstackaddr'. It is recommended that new applications use the 'pthread_attr_getstack' function" verbose="Found obsolete function 'pthread_attr_getstackaddr'. It is recommended that new applications use the 'pthread_attr_getstack' function">
208 |   </error>
209 |   <error id="obsoleteFunctionspthread_attr_setstackaddr" severity="style" msg="Found obsolete function 'pthread_attr_setstackaddr'. It is recommended that new applications use the 'pthread_attr_setstack' function" verbose="Found obsolete function 'pthread_attr_setstackaddr'. It is recommended that new applications use the 'pthread_attr_setstack' function">
210 |   </error>
211 |   <error id="obsoleteFunctionsrand_r" severity="style" msg="Found obsolete function 'rand_r'. It is recommended to use the function 'rand' instead" verbose="Found obsolete function 'rand_r'. It is recommended to use the function 'rand' instead">
212 |   </error>
213 |   <error id="obsoleteFunctionsrindex" severity="style" msg="Found obsolete function 'rindex'. It is recommended to use the function 'strrchr' instead" verbose="Found obsolete function 'rindex'. It is recommended to use the function 'strrchr' instead">
214 |   </error>
215 |   <error id="obsoleteFunctionsscalbln" severity="style" msg="Found obsolete function 'scalb'. It is recommended to use either 'scalbln', 'scalblnf' or 'scalblnl' instead of this function" verbose="Found obsolete function 'scalb'. It is recommended to use either 'scalbln', 'scalblnf' or 'scalblnl' instead of this function">
216 |   </error>
217 |   <error id="obsoleteFunctionsswapcontext" severity="style" msg="Found obsolete function 'swapcontext'. Due to portability issues with this function, applications are recommended to be rewritten to use POSIX threads" verbose="Found obsolete function 'swapcontext'. Due to portability issues with this function, applications are recommended to be rewritten to use POSIX threads">
218 |   </error>
219 |   <error id="obsoleteFunctionstmpnam" severity="style" msg="Found obsolete function 'tmpnam'. It is recommended to use either 'tmpfile', 'mkstemp', or 'mkdtemp' instead for this function" verbose="Found obsolete function 'tmpnam'. It is recommended to use either 'tmpfile', 'mkstemp', or 'mkdtemp' instead for this function">
220 |   </error>
221 |   <error id="obsoleteFunctionstmpnam_r" severity="style" msg="Found obsolete function 'tmpnam_r'. It is recommended to use either 'tmpfile', 'mkstemp', or 'mkdtemp' instead for this function" verbose="Found obsolete function 'tmpnam_r'. It is recommended to use either 'tmpfile', 'mkstemp', or 'mkdtemp' instead for this function">
222 |   </error>
223 |   <error id="obsoleteFunctionsualarm" severity="style" msg="Found obsolete function 'ualarm'. It is recommended to use either 'timer_create', 'timer_delete', 'timer_getoverrun', 'timer_gettime', or 'timer_settime' instead of this function" verbose="Found obsolete function 'ualarm'. It is recommended to use either 'timer_create', 'timer_delete', 'timer_getoverrun', 'timer_gettime', or 'timer_settime' instead of this function">
224 |   </error>
225 |   <error id="obsoleteFunctionsusleep" severity="style" msg="Found obsolete function 'usleep'. It is recommended that new applications use the 'nanosleep' or 'setitimer' function" verbose="Found obsolete function 'usleep'. POSIX.1-2001 declares usleep() function obsolete and POSIX.1-2008 removes it. It is recommended that new applications use the 'nanosleep' or 'setitimer' function.">
226 |   </error>
227 |   <error id="obsoleteFunctionsutime" severity="style" msg="Found obsolete function 'utime'. It is recommended to use the function 'utimensat' instead" verbose="Found obsolete function 'utime'. It is recommended to use the function 'utimensat' instead">
228 |   </error>
229 |   <error id="obsoleteFunctionsvfork" severity="style" msg="Found obsolete function 'vfork'. It is recommended to use the function 'fork' instead" verbose="Found obsolete function 'vfork'. It is recommended to use the function 'fork' instead">
230 |   </error>
231 |   <error id="obsoleteFunctionswcswcs" severity="style" msg="Found obsolete function 'wcswcs'. It is recommended to use the function 'wcsstr' instead" verbose="Found obsolete function 'wcswcs'. It is recommended to use the function 'wcsstr' instead">
232 |   </error>
233 |   <error id="assignBoolToPointer" severity="error" msg="Assigning bool value to pointer (converting bool value to address)" verbose="Assigning bool value to pointer (converting bool value to address)">
234 |   </error>
235 |   <error id="sprintfOverlappingData" severity="error" msg="Undefined behavior: variable is used as parameter and destination in s[n]printf()." verbose="The variable 'varname' is used both as a parameter and as a destination in s[n]printf(). The origin and destination buffers overlap. Quote from glibc (C-library) documentation (http://www.gnu.org/software/libc/manual/html_mono/libc.html#Formatted-Output-Functions): 'If copying takes place between objects that overlap as a result of a call to sprintf() or snprintf(), the results are undefined.'">
236 |   </error>
237 |   <error id="udivError" severity="error" msg="Unsigned division. The result will be wrong." verbose="Unsigned division. The result will be wrong.">
238 |   </error>
239 |   <error id="zerodiv" severity="error" msg="Division by zero" verbose="Division by zero">
240 |   </error>
241 |   <error id="wrongmathcall" severity="error" msg="Passing value  to () leads to undefined result" verbose="Passing value  to () leads to undefined result">
242 |   </error>
243 |   <error id="fflushOnInputStream" severity="error" msg="fflush() called on input stream &quot;stdin&quot; may result in undefined behaviour" verbose="fflush() called on input stream &quot;stdin&quot; may result in undefined behaviour">
244 |   </error>
245 |   <error id="unusedScopedObject" severity="error" msg="instance of &quot;varname&quot; object destroyed immediately" verbose="instance of &quot;varname&quot; object destroyed immediately">
246 |   </error>
247 |   <error id="sizeofwithsilentarraypointer" severity="error" msg="Using sizeof for array given as function argument returns the size of pointer." verbose="Giving array as function parameter and then using sizeof-operator for the array argument. In this case the sizeof-operator returns the size of pointer (in the system). It does not return the size of the whole array in bytes as might be expected. For example, this code:&#xa;     int f(char a[100]) {&#xa;         return sizeof(a);&#xa;     }&#xa; returns 4 (in 32-bit systems) or 8 (in 64-bit systems) instead of 100 (the size of the array in bytes).">
248 |   </error>
249 | 
250 |   <error id="sizeofwithnumericparameter" severity="warning" msg="Using sizeof with a numeric constant as function argument might not be what you intended." verbose="It is unusual to use constant value with sizeof. For example, sizeof(10) returns 4 (in 32-bit systems) or 8 (in 64-bit systems) instead of 10. sizeof('A') and sizeof(char) can return different results.">
251 |   </error>
252 |   <error id="coutCerrMisusage" severity="error" msg="Invalid usage of output stream: '&lt;&lt; std::cout'." verbose="Invalid usage of output stream: '&lt;&lt; std::cout'.">
253 |   </error>
254 |   <error id="doubleFree" severity="error" msg="Memory pointed to by 'varname' is freed twice." verbose="Memory pointed to by 'varname' is freed twice.">
255 |   </error>
256 |   <error id="cstyleCast" severity="style" msg="C-style pointer casting" verbose="C-style pointer casting">
257 |   </error>
258 |   <error id="dangerousUsageStrtol" severity="error" msg="Invalid radix in call to strtol or strtoul. Must be 0 or 2-36" verbose="Invalid radix in call to strtol or strtoul. Must be 0 or 2-36">
259 |   </error>
260 |   <error id="passedByValue" severity="performance" msg="Function parameter 'parametername' should be passed by reference." verbose="Parameter 'parametername' is passed as a value. It could be passed as a (const) reference which is usually faster and recommended in C++.">
261 |   </error>
262 |   <error id="constStatement" severity="warning" msg="Redundant code: Found a statement that begins with type constant" verbose="Redundant code: Found a statement that begins with type constant">
263 |   </error>
264 |   <error id="charArrayIndex" severity="warning" msg="Using char type as array index" verbose="Using signed char type as array index. If the value can be greater than 127 there will be a buffer overflow (because of sign extension).">
265 |   </error>
266 |   <error id="charBitOp" severity="warning" msg="When using char variables in bit operations, sign extension can generate unexpected results." verbose="When using char variables in bit operations, sign extension can generate unexpected results. For example:&#xa;    char c = 0x80;&#xa;    int i = 0 | c;&#xa;    if (i &amp; 0x8000)&#xa;        printf(&quot;not expected&quot;);&#xa;The 'not expected' will be printed on the screen.">
267 |   </error>
268 |   <error id="variableScope" severity="style" msg="The scope of the variable 'varname' can be reduced" verbose="The scope of the variable 'varname' can be reduced. Warning: It can be unsafe to fix this message. Be careful. Especially when there are inner loops. Here is an example where cppcheck will write that the scope for 'i' can be reduced:&#xa;void f(int x)&#xa;{&#xa;    int i = 0;&#xa;    if (x) {&#xa;        // it's safe to move 'int i = 0' here&#xa;        for (int n = 0; n &lt; 10; ++n) {&#xa;            // it is possible but not safe to move 'int i = 0' here&#xa;            do_something(&amp;i);&#xa;        }&#xa;    }&#xa;}&#xa;When you see this message it is always safe to reduce the variable scope 1 level.">
269 |   </error>
270 |   <error id="strPlusChar" severity="error" msg="Unusual pointer arithmetic" verbose="Unusual pointer arithmetic">
271 |   </error>
272 |   <error id="sizeofsizeof" severity="warning" msg="Calling sizeof for 'sizeof'." verbose="Calling sizeof for 'sizeof looks like a suspicious code and most likely there should be just one 'sizeof'. The current code is equivalent to 'sizeof(size_t)'">
273 |   </error>
274 |   <error id="sizeofCalculation" severity="warning" msg="Found calculation inside sizeof()" verbose="Found calculation inside sizeof()">
275 |   </error>
276 |   <error id="redundantAssignInSwitch" severity="warning" msg="Redundant assignment of &quot;varname&quot; in switch" verbose="Redundant assignment of &quot;varname&quot; in switch">
277 |   </error>
278 |   <error id="switchCaseFallThrough" severity="style" msg="Switch falls through case without comment" verbose="Switch falls through case without comment">
279 |   </error>
280 |   <error id="selfAssignment" severity="warning" msg="Redundant assignment of &quot;varname&quot; to itself" verbose="Redundant assignment of &quot;varname&quot; to itself">
281 |   </error>
282 |   <error id="assignmentInAssert" severity="warning" msg="Assert statement modifies 'varname'." verbose="Variable 'varname' is modified insert assert statement. Assert statements are removed from release builds so the code inside assert statement is not run. If the code is needed also in release builds this is a bug.">
283 |   </error>
284 |   <error id="invalidscanf" severity="warning" msg="scanf without field width limits can crash with huge input data" verbose="scanf without field width limits can crash with huge input data. To fix this error message add a field width specifier:&#xa;    %s =&gt; %20s&#xa;    %i =&gt; %3i&#xa;&#xa;Sample program that can crash:&#xa;&#xa;#include &lt;stdio.h&gt;&#xa;int main()&#xa;{&#xa;    int a;&#xa;    scanf(&quot;%i&quot;, &amp;a);&#xa;    return 0;&#xa;}&#xa;&#xa;To make it crash:&#xa;perl -e 'print &quot;5&quot;x2100000' | ./a.out">
285 |   </error>
286 |   <error id="incorrectLogicOperator" severity="warning" msg="Mutual exclusion over || always evaluates to true. Did you intend to use &amp;&amp; instead?" verbose="Mutual exclusion over || always evaluates to true. Did you intend to use &amp;&amp; instead?">
287 |   </error>
288 |   <error id="secondAlwaysTrueFalseWhenFirstTrue" severity="style" msg="when first comparison is true, the 2nd comparison is always true" verbose="when first comparison is true, the 2nd comparison is always true">
289 |   </error>
290 |   <error id="memsetZeroBytes" severity="warning" msg="memset() called to fill 0 bytes of 'varname'" verbose="memset() called to fill 0 bytes of 'varname'. Second and third arguments might be inverted.">
291 |   </error>
292 |   <error id="clarifyCalculation" severity="style" msg="Clarify calculation precedence for + and ?" verbose="Suspicious calculation. Please use parentheses to clarify the code. The code 'a+b?c:d' should be written as either '(a+b)?c:d' or 'a+(b?c:d)'.">
293 |   </error>
294 |   <error id="clarifyCondition" severity="style" msg="Suspicious condition (assignment+comparison), it can be clarified with parentheses" verbose="Suspicious condition (assignment+comparison), it can be clarified with parentheses">
295 |   </error>
296 |   <error id="incorrectStringCompare" severity="warning" msg="String literal &quot;Hello World&quot; doesn't match length argument for substr(12)." verbose="String literal &quot;Hello World&quot; doesn't match length argument for substr(12).">
297 |   </error>
298 |   <error id="incorrectStringBooleanError" severity="warning" msg="A boolean comparison with the string literal &quot;Hello World&quot; is always true." verbose="A boolean comparison with the string literal &quot;Hello World&quot; is always true.">
299 |   </error>
300 |   <error id="incrementboolean" severity="style" msg="The use of a variable of type bool with the ++ postfix operator is always true and deprecated by the C++ Standard." verbose="The operand of a postfix increment operator may be of type bool but it is deprecated by C++ Standard (Annex D-1) and the operand is always set to true.">
301 |   </error>
302 |   <error id="comparisonOfBoolWithInt" severity="warning" msg="Comparison of a boolean with integer that is neither 1 nor 0" verbose="The expression &quot;varname&quot; is of type 'bool' and it is compared against a integer value that is neither 1 nor 0.">
303 |   </error>
304 |   <error id="duplicateIf" severity="style" msg="Found duplicate if expressions." verbose="Finding the same expression more than once is suspicious and might indicate a cut and paste or logic error. Please examine this code carefully to determine if it is correct.">
305 |   </error>
306 |   <error id="duplicateBranch" severity="style" msg="Found duplicate branches for if and else." verbose="Finding the same code for an if branch and an else branch is suspicious and might indicate a cut and paste or logic error. Please examine this code carefully to determine if it is correct.">
307 |   </error>
308 |   <error id="duplicateExpression" severity="style" msg="Same expression on both sides of '&amp;&amp;'." verbose="Finding the same expression on both sides of an operator is suspicious and might indicate a cut and paste or logic error. Please examine this code carefully to determine if it is correct.">
309 |   </error>
310 |   <error id="stringCompare" severity="warning" msg="Comparison of identical string variables." verbose="The compared strings, 'varname1' and 'varname2', are identical. This could be a logic bug.">
311 |   </error>
312 |   <error id="duplicateBreak" severity="style" msg="Consecutive return, break, continue, goto or throw statements are unnecessary." verbose="The second of the two statements can never be executed, and so should be removed.">
313 |   </error>
314 |   <error id="unreachableCode" severity="style" msg="Statements following return, break, continue, goto or throw will never be executed." verbose="Statements following return, break, continue, goto or throw will never be executed.">
315 |   </error>
316 |   <error id="unsignedLessThanZero" severity="style" msg="Checking if unsigned variable 'varname' is less than zero." verbose="An unsigned variable will never be negative so it is either pointless or an error to check if it is.">
317 |   </error>
318 |   <error id="unsignedPositive" severity="style" msg="An unsigned variable 'varname' can't be negative so it is unnecessary to test it." verbose="An unsigned variable 'varname' can't be negative so it is unnecessary to test it.">
319 |   </error>
320 | 
321 |   <error id="compareBoolExpressionWithInt" severity="warning" msg="Comparison of a boolean expression with an integer other than 0 or 1." verbose="Comparison of a boolean expression with an integer other than 0 or 1.">
322 |   </error>
323 | 
324 |   <error id="wrongPrintfScanfArgNum" severity="error" msg="printf format string has 3 parameters but only 2 are given" verbose="printf format string has 3 parameters but only 2 are given">
325 |   </error>
326 |   <error id="invalidScanfArgType" severity="warning" msg="scanf argument no. 1: requires non-const pointers or arrays as arguments" verbose="scanf argument no. 1: requires non-const pointers or arrays as arguments">
327 |   </error>
328 |   <error id="invalidPrintfArgType_s" severity="warning" msg="%s in format string (no. 1) requires a char* given in the argument list" verbose="%s in format string (no. 1) requires a char* given in the argument list">
329 |   </error>
330 |   <error id="invalidPrintfArgType_n" severity="warning" msg="%n in format string (no. 1) requires a pointer to an non-const integer given in the argument list" verbose="%n in format string (no. 1) requires a pointer to an non-const integer given in the argument list">
331 |   </error>
332 |   <error id="invalidPrintfArgType_p" severity="warning" msg="%p in format string (no. 1) requires an integer or pointer given in the argument list" verbose="%p in format string (no. 1) requires an integer or pointer given in the argument list">
333 |   </error>
334 |   <error id="invalidPrintfArgType_int" severity="warning" msg="%u in format string (no. 1) requires an integer given in the argument list" verbose="%u in format string (no. 1) requires an integer given in the argument list">
335 |   </error>
336 |   <error id="invalidPrintfArgType_float" severity="warning" msg="%f in format string (no. 1) requires a floating point number given in the argument list" verbose="%f in format string (no. 1) requires a floating point number given in the argument list">
337 |   </error>
338 |   <error id="wrongcctypecall" severity="error" msg="Passing value value to funname() cause undefined behavior, which may lead to a crash" verbose="Passing value value to funname() cause undefined behavior, which may lead to a crash">
339 |   </error>
340 |   <error id="invalidIterator1" severity="error" msg="Invalid iterator: iterator" verbose="Invalid iterator: iterator">
341 |   </error>
342 |   <error id="iterators" severity="error" msg="Same iterator is used with both container1 and container2" verbose="Same iterator is used with both container1 and container2">
343 |   </error>
344 |   <error id="mismatchingContainers" severity="error" msg="mismatching containers" verbose="mismatching containers">
345 |   </error>
346 |   <error id="eraseDereference" severity="error" msg="Dereferenced iterator 'iter' has been erased" verbose="Dereferenced iterator 'iter' has been erased">
347 |   </error>
348 |   <error id="stlOutOfBounds" severity="error" msg="When i==foo.size(), foo[i] is out of bounds" verbose="When i==foo.size(), foo[i] is out of bounds">
349 |   </error>
350 |   <error id="erase" severity="error" msg="Dangerous iterator usage after erase()-method." verbose="The iterator is invalid after it has been used in erase() function. Dereferencing or comparing it with another iterator is invalid operation.">
351 |   </error>
352 |   <error id="invalidIterator2" severity="error" msg="After push_back|push_front|insert, the iterator 'iterator' may be invalid" verbose="After push_back|push_front|insert, the iterator 'iterator' may be invalid">
353 |   </error>
354 |   <error id="invalidPointer" severity="error" msg="Invalid pointer 'pointer' after push_back / push_front" verbose="Invalid pointer 'pointer' after push_back / push_front">
355 |   </error>
356 |   <error id="stlBoundries" severity="error" msg="Dangerous container iterator compare using &lt; operator for container" verbose="Container 'container' iterator compared with &lt; operator. Using &lt; operator with container type iterators is dangerous since the order of the items is not guaranteed. One should use != operator instead when comparing iterators in the container.">
357 |   </error>
358 |   <error id="stlIfFind" severity="warning" msg="Suspicious condition. The result of find is an iterator, but it is not properly checked." verbose="Suspicious condition. The result of find is an iterator, but it is not properly checked.">
359 |   </error>
360 |   <error id="stlIfStrFind" severity="warning" msg="Suspicious checking of string::find() return value." verbose="Checking of string::find() return value looks Suspicious. string::find will return 0 if the string is found at position 0. If that is wanted to check then string::compare is a faster alternative because it doesn't scan through the string.">
361 |   </error>
362 |   <error id="stlcstr" severity="error" msg="Dangerous usage of c_str(). The returned value by c_str() is invalid after this call." verbose="Dangerous usage of c_str(). The c_str() return value is only valid until its string is deleted.">
363 |   </error>
364 |   <error id="stlSize" severity="performance" msg="Possible inefficient checking for 'list' emptiness." verbose="Checking for 'list' emptiness might be inefficient. Using list.empty() instead of list.size() can be faster. list.size() can take linear time but list.empty() is guaranteed to take constant time.">
365 |   </error>
366 |   <error id="redundantIfRemove" severity="style" msg="Redundant checking of STL container element." verbose="Redundant checking of STL container element existence before removing it. The remove method in the STL will not do anything if element doesn't exist">
367 |   </error>
368 |   <error id="useAutoPointerCopy" severity="style" msg="Copy 'auto_ptr' pointer to another do not create two equal objects since one has lost its ownership of the pointer." verbose="The auto_ptr has semantics of strict ownership, meaning that the auto_ptr instance is the sole entity responsible for the object's lifetime. If an auto_ptr is copied, the source loses the reference.">
369 |   </error>
370 |   <error id="useAutoPointerContainer" severity="error" msg="You can randomly lose access to pointers if you store 'auto_ptr' pointers in a container because the copy-semantics of 'auto_ptr' are not compatible with containers." verbose="An element of container must be able to be copied but 'auto_ptr' does not fulfill this requirement. You should consider to use 'shared_ptr' or 'unique_ptr'. It is suitable for use in containers, because they no longer copy their values, they move them.">
371 |   </error>
372 |   <error id="useAutoPointerArray" severity="error" msg="Object pointed by an 'auto_ptr' is destroyed using operator 'delete'. You should not use 'auto_ptr' for pointers obtained with operator 'new[]'." verbose="Object pointed by an 'auto_ptr' is destroyed using operator 'delete'. This means that you should only use 'auto_ptr' for pointers obtained with operator 'new'. This excludes arrays, which are allocated by operator 'new[]' and must be deallocated by operator 'delete[]'.">
373 |   </error>
374 |   <error id="uselessCallsCompare" severity="warning" msg="It is inefficient to call 'str.find(str)' as it always returns 0." verbose="The 'std::string::find()' returns zero when given itself as parameter (str.find(str)). As it is currently the code is inefficient. It is also possible either the string searched ('str') or searched for ('str') is wrong/mixed in the code?">
375 |   </error>
376 |   <error id="uselessCallsSwap" severity="performance" msg="It is inefficient to swap a object with itself by calling 'str.swap(str)'" verbose="The 'swap()' function has no logical effect when given itself as parameter (str.swap(str)). As it is currently the code is inefficient. It is possible either the object or the parameter is wrong/mixed in the code?">
377 |   </error>
378 |   <error id="uselessCallsSubstr" severity="performance" msg="Function 'substr' useless call. Function create copy of the 'str' object." verbose="Function 'substr' useless call. 'substr' function create copy of the whole 'str' object which can decrease in performance. Please use '=' operator instead.">
379 |   </error>
380 |   <error id="uninitstring" severity="error" msg="Dangerous usage of 'varname' (strncpy doesn't always 0-terminate it)" verbose="Dangerous usage of 'varname' (strncpy doesn't always 0-terminate it)">
381 |   </error>
382 |   <error id="uninitdata" severity="error" msg="Data is allocated but not initialized: varname" verbose="Data is allocated but not initialized: varname">
383 |   </error>
384 |   <error id="uninitvar" severity="error" msg="Uninitialized variable: varname" verbose="Uninitialized variable: varname">
385 |   </error>
386 |   <error id="unusedFunction" severity="style" msg="The function 'funcName' is never used" verbose="The function 'funcName' is never used">
387 |   </error>
388 |   <error id="unusedVariable" severity="style" msg="Unused variable: varname" verbose="Unused variable: varname">
389 |   </error>
390 |   <error id="unusedAllocatedMemory" severity="style" msg="Variable 'varname' is allocated memory that is never used" verbose="Variable 'varname' is allocated memory that is never used">
391 |   </error>
392 |   <error id="unreadVariable" severity="style" msg="Variable 'varname' is assigned a value that is never used" verbose="Variable 'varname' is assigned a value that is never used">
393 |   </error>
394 |   <error id="unassignedVariable" severity="style" msg="Variable 'varname' is not assigned a value" verbose="Variable 'varname' is not assigned a value">
395 |   </error>
396 |   <error id="unusedStructMember" severity="style" msg="struct or union member 'structname::variable' is never used" verbose="struct or union member 'structname::variable' is never used">
397 |   </error>
398 |   <error id="postfixOperator" severity="performance" msg="Prefer prefix ++/-- operators for non-primitive types." verbose="Prefix ++/-- operators should be preferred for non-primitive types. Pre-increment/decrement can be more efficient than post-increment/decrement. Post-increment/decrement usually involves keeping a copy of the previous value around and adds a little extra code.">
399 |   </error>
400 |   <error id="syntaxError" severity="error" msg="Invalid number of character ( ) when these macros are defined: ''." verbose="Invalid number of character ( ) when these macros are defined: ''.">
401 |   </error>
402 |   <error id="cppcheckError" severity="error" msg="Analysis failed. If the code is valid then please report this failure." verbose="Analysis failed. If the code is valid then please report this failure.">
403 |   </error>
404 | 
405 |   <error id="unnecessaryForwardDeclaration" severity="style" msg="Variable 'name' forward declaration unnecessary, already declared" verbose="Variable 'name' forward declaration unnecessary, already declared">
406 |   </error>
407 |   <error id="variableHidingEnum" severity="style" msg="Variable 'name' hides enumerator with same name" verbose="Variable 'name' hides enumerator with same name">
408 |   </error>
409 |   <error id="unnecessaryQualification" severity="portability" msg="Extra qualification 'type' unnecessary and considered an error by many compilers." verbose="Extra qualification 'type' unnecessary and considered an error by many compilers.">
410 |   </error>
411 |   <error id="missingInclude" severity="information" msg="Include file: &quot;&quot; not found." verbose="Include file: &quot;&quot; not found.">
412 |   </error>
413 |   <error id="preprocessorErrorDirective" severity="error" msg="#error message" verbose="#error message">
414 |   </error>
415 |   </errors>
416 | </results>
417 | 


--------------------------------------------------------------------------------
/src/main/files/cppcheck-1.54.xml:
--------------------------------------------------------------------------------
  1 | <?xml version="1.0" encoding="UTF-8"?>
  2 | <results version="2">
  3 |   <cppcheck version="1.54"/>
  4 |   <errors>  <error id="AssignmentAddressToInteger" severity="portability" msg="Assigning an address value to the integer (int/long/etc) type is not portable" verbose="Assigning an address value to the integer (int/long/etc) type is not portable across different platforms and compilers. For example in 32-bit Windows and linux they are same width, but in 64-bit Windows and linux they are of different width. In worst case you end up assigning 64-bit address to 32-bit integer. The safe way is to always assign addresses only to pointer types (or typedefs).">
  5 |   </error>
  6 |   <error id="AssignmentIntegerToAddress" severity="portability" msg="Assigning an integer (int/long/etc) to a pointer is not portable" verbose="Assigning an integer (int/long/etc) to a pointer is not portable across different platforms and compilers. For example in 32-bit Windows and linux they are same width, but in 64-bit Windows and linux they are of different width. In worst case you end up assigning 32-bit integer to 64-bit pointer. The safe way is to always assign address to pointer.">
  7 |   </error>
  8 |   <error id="autoVariables" severity="error" msg="Assigning address of local auto-variable to a function parameter." verbose="Dangerous assignment - function parameter takes the address of a local auto-variable. Local auto-variables are reserved from the stack. And the stack is freed when the function ends. So the pointer to a local variable is invalid after the function ends.">
  9 |   </error>
 10 |   <error id="returnAddressOfAutoVariable" severity="error" msg="Return of the address of an auto-variable" verbose="Return of the address of an auto-variable">
 11 |   </error>
 12 |   <error id="returnLocalVariable" severity="error" msg="Returning pointer to local array variable" verbose="Returning pointer to local array variable">
 13 |   </error>
 14 |   <error id="returnReference" severity="error" msg="Returning reference to auto variable" verbose="Returning reference to auto variable">
 15 |   </error>
 16 |   <error id="returnTempReference" severity="error" msg="Returning reference to temporary" verbose="Returning reference to temporary">
 17 |   </error>
 18 |   <error id="returnTempPointer" severity="error" msg="Returning pointer to temporary" verbose="Returning pointer to temporary">
 19 |   </error>
 20 |   <error id="autovarInvalidDeallocation" severity="error" msg="Deallocating auto-variable is invalid" verbose="Deallocating an auto-variable is invalid. You should only free memory that has been allocated dynamically.">
 21 |   </error>
 22 |   <error id="returnAddressOfFunctionParameter" severity="error" msg="Return the address of function parameter 'parameter'" verbose="Address of the function parameter 'parameter' is invalid after the function exits. Function parameters are created into the stack. When the function exits the stack is deleted.">
 23 |   </error>
 24 |   <error id="boostForeachError" severity="error" msg="BOOST_FOREACH caches the end() iterator. It's undefined behavior if you modify the container." verbose="BOOST_FOREACH caches the end() iterator. It's undefined behavior if you modify the container.">
 25 |   </error>
 26 |   <error id="arrayIndexOutOfBounds" severity="error" msg="Array 'array[2]' index 2 out of bounds" verbose="Array 'array[2]' index 2 out of bounds">
 27 |   </error>
 28 |   <error id="bufferAccessOutOfBounds" severity="error" msg="Buffer access out-of-bounds: buffer" verbose="Buffer access out-of-bounds: buffer">
 29 |   </error>
 30 |   <error id="outOfBounds" severity="error" msg="index is out of bounds: Supplied size 2 is larger than actual size of 1" verbose="index is out of bounds: Supplied size 2 is larger than actual size of 1">
 31 |   </error>
 32 |   <error id="terminateStrncpy" severity="warning" msg="The buffer 'buffer' may not be zero-terminated after the call to strncpy()." verbose="The use of strncpy() usually indicates that the programmer wants to ensure the buffer is zero-terminated after the call. However if the (buffer) size given for the strncpy() call matches the actual buffer size strncpy() does not add the zero at the end of the buffer. This may cause bugs later in the code if the code assumes buffer is zero-terminated.">
 33 |   </error>
 34 |   <error id="bufferNotZeroTerminated" severity="warning" msg="The buffer 'buffer' is not zero-terminated after the call to strncpy()." verbose="The buffer 'buffer' is not zero-terminated after the call to strncpy(). This will cause bugs later in the code if the code assumes the buffer is zero-terminated." inconclusive="true">
 35 |   </error>
 36 |   <error id="negativeIndex" severity="error" msg="Array index -1 is out of bounds" verbose="Array index -1 is out of bounds">
 37 |   </error>
 38 |   <error id="insecureCmdLineArgs" severity="error" msg="Buffer overrun possible for long cmd-line args" verbose="Buffer overrun possible for long cmd-line args">
 39 |   </error>
 40 |   <error id="pointerOutOfBounds" severity="portability" msg="Undefined behaviour: pointer arithmetic result does not point into or just past the end of the array" verbose="Undefined behaviour: Using pointer arithmetic so that the result does not point into or just past the end of the same object. Further information: https://www.securecoding.cert.org/confluence/display/seccode/ARR30-C.+Do+not+form+or+use+out+of+bounds+pointers+or+array+subscripts">
 41 |   </error>
 42 |   <error id="arrayIndexThenCheck" severity="style" msg="Array index index is used before limits check" verbose="Defensive programming: The variable index is used as array index and then there is a check that it is within limits. This can mean that the array might be accessed out-of-bounds. Reorder conditions such as '(a[i] &amp;&amp; i &lt; 10)' to '(i &lt; 10 &amp;&amp; a[i])'. That way the array will not be accessed when the index is out of limits.">
 43 |   </error>
 44 |   <error id="possibleBufferAccessOutOfBounds" severity="warning" msg="Possible buffer overflow if strlen(source) is larger than or equal to sizeof(destination)." verbose="The source buffer is larger than the destination buffer so there is the potential for overflowing the destination buffer.">
 45 |   </error>
 46 |   <error id="possibleReadlinkBufferOverrun" severity="warning" msg="readlink() might return the full size of 'buffer'. Lower the supplied size by one." verbose="readlink() might return the full size of 'buffer'. Lower the supplied size by one. If a buffer[len] = '\0'; statement follows, it will overrun the buffer." inconclusive="true">
 47 |   </error>
 48 |   <error id="noConstructor" severity="style" msg="The class 'classname' does not have a constructor." verbose="The class 'classname 'does not have a constructor but it has attributes. The attributes are not initialized which may cause bugs or undefined behavior.">
 49 |   </error>
 50 |   <error id="uninitMemberVar" severity="warning" msg="Member variable 'classname::varname' is not initialized in the constructor." verbose="Member variable 'classname::varname' is not initialized in the constructor.">
 51 |   </error>
 52 |   <error id="operatorEqVarError" severity="warning" msg="Member variable 'classname::' is not assigned a value in 'classname::operator='" verbose="Member variable 'classname::' is not assigned a value in 'classname::operator='">
 53 |   </error>
 54 |   <error id="unusedPrivateFunction" severity="style" msg="Unused private function 'classname::funcname'" verbose="Unused private function 'classname::funcname'">
 55 |   </error>
 56 |   <error id="memsetClass" severity="error" msg="Using 'memfunc' on class that contains a classname" verbose="Using 'memfunc' on class that contains a classname">
 57 |   </error>
 58 |   <error id="operatorEq" severity="style" msg="'class::operator=' should return 'class &amp;'" verbose="'class::operator=' should return 'class &amp;'">
 59 |   </error>
 60 |   <error id="virtualDestructor" severity="error" msg="Class Base which is inherited by class Derived does not have a virtual destructor" verbose="Class Base which is inherited by class Derived does not have a virtual destructor">
 61 |   </error>
 62 |   <error id="thisSubtraction" severity="warning" msg="Suspicious pointer subtraction" verbose="Suspicious pointer subtraction">
 63 |   </error>
 64 |   <error id="operatorEqRetRefThis" severity="style" msg="'operator=' should return reference to self" verbose="'operator=' should return reference to self">
 65 |   </error>
 66 |   <error id="operatorEqToSelf" severity="warning" msg="'operator=' should check for assignment to self" verbose="'operator=' should check for assignment to self">
 67 |   </error>
 68 |   <error id="functionConst" severity="style" msg="Technically the member function 'class::function' can be const." verbose="The member function 'class::function' can be made a const function. Making this function const function should not cause compiler errors. Even though the function can be made const function technically it may not make sense conceptually. Think about your design and task of the function first - is it a function that must not change object internal state?" inconclusive="true">
 69 |   </error>
 70 |   <error id="initializerList" severity="style" msg="Member variable 'class::variable' is in the wrong order in the initializer list." verbose="Members are initialized in the order they are declared, not the order they are in the initializer list.  Keeping the initializer list in the same order that the members were declared prevents order dependent initialization errors." inconclusive="true">
 71 |   </error>
 72 |   <error id="exceptThrowInDestructor" severity="error" msg="Throwing exception in destructor" verbose="Throwing exception in destructor">
 73 |   </error>
 74 |   <error id="exceptDeallocThrow" severity="warning" msg="Throwing exception in invalid state, p points at deallocated memory" verbose="Throwing exception in invalid state, p points at deallocated memory">
 75 |   </error>
 76 |   <error id="exceptRethrowCopy" severity="style" msg="Throwing a copy of the caught exception instead of rethrowing the original exception" verbose="Rethrowing an exception with 'throw varname;' makes an unnecessary copy of 'varname'.&#xa;To rethrow the caught exception without unnecessary copying or slicing, use a bare 'throw;'.">
 77 |   </error>
 78 |   <error id="catchExceptionByValue" severity="style" msg="Exception should be caught by reference." verbose="The exception is caught as a value. It could be caught as a (const) reference which is usually recommended in C++.">
 79 |   </error>
 80 |   <error id="assignIfError" severity="style" msg="Mismatching assignment and comparison, comparison is always false" verbose="Mismatching assignment and comparison, comparison is always false">
 81 |   </error>
 82 |   <error id="comparisonError" severity="style" msg="Expression '(X &amp; 0x6) == 0x1' is always false" verbose="The expression '(X &amp; 0x6) == 0x1' is always false. Check carefully constants and operators used, these errors might be hard to spot sometimes. In case of complex expression it might help to split it to separate expressions.">
 83 |   </error>
 84 |   <error id="multiCondition" severity="style" msg="'else if' condition matches previous condition at line 1" verbose="'else if' condition matches previous condition at line 1">
 85 |   </error>
 86 |   <error id="leakNoVarFunctionCall" severity="error" msg="Allocation with funcName, funcName doesn't release it." verbose="Allocation with funcName, funcName doesn't release it.">
 87 |   </error>
 88 |   <error id="memleak" severity="error" msg="Memory leak: varname" verbose="Memory leak: varname">
 89 |   </error>
 90 |   <error id="resourceLeak" severity="error" msg="Resource leak: varname" verbose="Resource leak: varname">
 91 |   </error>
 92 |   <error id="deallocDealloc" severity="error" msg="Deallocating a deallocated pointer: varname" verbose="Deallocating a deallocated pointer: varname">
 93 |   </error>
 94 |   <error id="deallocuse" severity="error" msg="Dereferencing 'varname' after it is deallocated / released" verbose="Dereferencing 'varname' after it is deallocated / released">
 95 |   </error>
 96 |   <error id="mismatchSize" severity="error" msg="The given size sz is mismatching" verbose="The given size sz is mismatching">
 97 |   </error>
 98 |   <error id="mismatchAllocDealloc" severity="error" msg="Mismatching allocation and deallocation: varname" verbose="Mismatching allocation and deallocation: varname">
 99 |   </error>
100 |   <error id="memleakOnRealloc" severity="error" msg="Common realloc mistake: 'varname' nulled but not freed upon failure" verbose="Common realloc mistake: 'varname' nulled but not freed upon failure">
101 |   </error>
102 |   <error id="nonreentrantFunctionscrypt" severity="portability" msg="Found non reentrant function 'crypt'. For threadsafe applications it is recommended to use the reentrant replacement function 'crypt_r'" verbose="Found non reentrant function 'crypt'. For threadsafe applications it is recommended to use the reentrant replacement function 'crypt_r'">
103 |   </error>
104 |   <error id="nonreentrantFunctionsctermid" severity="portability" msg="Found non reentrant function 'ctermid'. For threadsafe applications it is recommended to use the reentrant replacement function 'ctermid_r'" verbose="Found non reentrant function 'ctermid'. For threadsafe applications it is recommended to use the reentrant replacement function 'ctermid_r'">
105 |   </error>
106 |   <error id="nonreentrantFunctionsecvt" severity="portability" msg="Found non reentrant function 'ecvt'. For threadsafe applications it is recommended to use the reentrant replacement function 'ecvt_r'" verbose="Found non reentrant function 'ecvt'. For threadsafe applications it is recommended to use the reentrant replacement function 'ecvt_r'">
107 |   </error>
108 |   <error id="nonreentrantFunctionsfcvt" severity="portability" msg="Found non reentrant function 'fcvt'. For threadsafe applications it is recommended to use the reentrant replacement function 'fcvt_r'" verbose="Found non reentrant function 'fcvt'. For threadsafe applications it is recommended to use the reentrant replacement function 'fcvt_r'">
109 |   </error>
110 |   <error id="nonreentrantFunctionsfgetgrent" severity="portability" msg="Found non reentrant function 'fgetgrent'. For threadsafe applications it is recommended to use the reentrant replacement function 'fgetgrent_r'" verbose="Found non reentrant function 'fgetgrent'. For threadsafe applications it is recommended to use the reentrant replacement function 'fgetgrent_r'">
111 |   </error>
112 |   <error id="nonreentrantFunctionsfgetpwent" severity="portability" msg="Found non reentrant function 'fgetpwent'. For threadsafe applications it is recommended to use the reentrant replacement function 'fgetpwent_r'" verbose="Found non reentrant function 'fgetpwent'. For threadsafe applications it is recommended to use the reentrant replacement function 'fgetpwent_r'">
113 |   </error>
114 |   <error id="nonreentrantFunctionsfgetspent" severity="portability" msg="Found non reentrant function 'fgetspent'. For threadsafe applications it is recommended to use the reentrant replacement function 'fgetspent_r'" verbose="Found non reentrant function 'fgetspent'. For threadsafe applications it is recommended to use the reentrant replacement function 'fgetspent_r'">
115 |   </error>
116 |   <error id="nonreentrantFunctionsgcvt" severity="portability" msg="Found non reentrant function 'gcvt'. For threadsafe applications it is recommended to use the reentrant replacement function 'gcvt_r'" verbose="Found non reentrant function 'gcvt'. For threadsafe applications it is recommended to use the reentrant replacement function 'gcvt_r'">
117 |   </error>
118 |   <error id="nonreentrantFunctionsgetgrent" severity="portability" msg="Found non reentrant function 'getgrent'. For threadsafe applications it is recommended to use the reentrant replacement function 'getgrent_r'" verbose="Found non reentrant function 'getgrent'. For threadsafe applications it is recommended to use the reentrant replacement function 'getgrent_r'">
119 |   </error>
120 |   <error id="nonreentrantFunctionsgetgrgid" severity="portability" msg="Found non reentrant function 'getgrgid'. For threadsafe applications it is recommended to use the reentrant replacement function 'getgrgid_r'" verbose="Found non reentrant function 'getgrgid'. For threadsafe applications it is recommended to use the reentrant replacement function 'getgrgid_r'">
121 |   </error>
122 |   <error id="nonreentrantFunctionsgetgrnam" severity="portability" msg="Found non reentrant function 'getgrnam'. For threadsafe applications it is recommended to use the reentrant replacement function 'getgrnam_r'" verbose="Found non reentrant function 'getgrnam'. For threadsafe applications it is recommended to use the reentrant replacement function 'getgrnam_r'">
123 |   </error>
124 |   <error id="nonreentrantFunctionsgethostbyaddr" severity="portability" msg="Found non reentrant function 'gethostbyaddr'. For threadsafe applications it is recommended to use the reentrant replacement function 'gethostbyaddr_r'" verbose="Found non reentrant function 'gethostbyaddr'. For threadsafe applications it is recommended to use the reentrant replacement function 'gethostbyaddr_r'">
125 |   </error>
126 |   <error id="nonreentrantFunctionsgethostbyname" severity="portability" msg="Found non reentrant function 'gethostbyname'. For threadsafe applications it is recommended to use the reentrant replacement function 'gethostbyname_r'" verbose="Found non reentrant function 'gethostbyname'. For threadsafe applications it is recommended to use the reentrant replacement function 'gethostbyname_r'">
127 |   </error>
128 |   <error id="nonreentrantFunctionsgethostbyname2" severity="portability" msg="Found non reentrant function 'gethostbyname2'. For threadsafe applications it is recommended to use the reentrant replacement function 'gethostbyname2_r'" verbose="Found non reentrant function 'gethostbyname2'. For threadsafe applications it is recommended to use the reentrant replacement function 'gethostbyname2_r'">
129 |   </error>
130 |   <error id="nonreentrantFunctionsgethostent" severity="portability" msg="Found non reentrant function 'gethostent'. For threadsafe applications it is recommended to use the reentrant replacement function 'gethostent_r'" verbose="Found non reentrant function 'gethostent'. For threadsafe applications it is recommended to use the reentrant replacement function 'gethostent_r'">
131 |   </error>
132 |   <error id="nonreentrantFunctionsgetlogin" severity="portability" msg="Found non reentrant function 'getlogin'. For threadsafe applications it is recommended to use the reentrant replacement function 'getlogin_r'" verbose="Found non reentrant function 'getlogin'. For threadsafe applications it is recommended to use the reentrant replacement function 'getlogin_r'">
133 |   </error>
134 |   <error id="nonreentrantFunctionsgetnetbyaddr" severity="portability" msg="Found non reentrant function 'getnetbyaddr'. For threadsafe applications it is recommended to use the reentrant replacement function 'getnetbyaddr_r'" verbose="Found non reentrant function 'getnetbyaddr'. For threadsafe applications it is recommended to use the reentrant replacement function 'getnetbyaddr_r'">
135 |   </error>
136 |   <error id="nonreentrantFunctionsgetnetbyname" severity="portability" msg="Found non reentrant function 'getnetbyname'. For threadsafe applications it is recommended to use the reentrant replacement function 'getnetbyname_r'" verbose="Found non reentrant function 'getnetbyname'. For threadsafe applications it is recommended to use the reentrant replacement function 'getnetbyname_r'">
137 |   </error>
138 |   <error id="nonreentrantFunctionsgetnetgrent" severity="portability" msg="Found non reentrant function 'getnetgrent'. For threadsafe applications it is recommended to use the reentrant replacement function 'getnetgrent_r'" verbose="Found non reentrant function 'getnetgrent'. For threadsafe applications it is recommended to use the reentrant replacement function 'getnetgrent_r'">
139 |   </error>
140 |   <error id="nonreentrantFunctionsgetprotobyname" severity="portability" msg="Found non reentrant function 'getprotobyname'. For threadsafe applications it is recommended to use the reentrant replacement function 'getprotobyname_r'" verbose="Found non reentrant function 'getprotobyname'. For threadsafe applications it is recommended to use the reentrant replacement function 'getprotobyname_r'">
141 |   </error>
142 |   <error id="nonreentrantFunctionsgetpwent" severity="portability" msg="Found non reentrant function 'getpwent'. For threadsafe applications it is recommended to use the reentrant replacement function 'getpwent_r'" verbose="Found non reentrant function 'getpwent'. For threadsafe applications it is recommended to use the reentrant replacement function 'getpwent_r'">
143 |   </error>
144 |   <error id="nonreentrantFunctionsgetpwnam" severity="portability" msg="Found non reentrant function 'getpwnam'. For threadsafe applications it is recommended to use the reentrant replacement function 'getpwnam_r'" verbose="Found non reentrant function 'getpwnam'. For threadsafe applications it is recommended to use the reentrant replacement function 'getpwnam_r'">
145 |   </error>
146 |   <error id="nonreentrantFunctionsgetpwuid" severity="portability" msg="Found non reentrant function 'getpwuid'. For threadsafe applications it is recommended to use the reentrant replacement function 'getpwuid_r'" verbose="Found non reentrant function 'getpwuid'. For threadsafe applications it is recommended to use the reentrant replacement function 'getpwuid_r'">
147 |   </error>
148 |   <error id="nonreentrantFunctionsgetrpcbyname" severity="portability" msg="Found non reentrant function 'getrpcbyname'. For threadsafe applications it is recommended to use the reentrant replacement function 'getrpcbyname_r'" verbose="Found non reentrant function 'getrpcbyname'. For threadsafe applications it is recommended to use the reentrant replacement function 'getrpcbyname_r'">
149 |   </error>
150 |   <error id="nonreentrantFunctionsgetrpcbynumber" severity="portability" msg="Found non reentrant function 'getrpcbynumber'. For threadsafe applications it is recommended to use the reentrant replacement function 'getrpcbynumber_r'" verbose="Found non reentrant function 'getrpcbynumber'. For threadsafe applications it is recommended to use the reentrant replacement function 'getrpcbynumber_r'">
151 |   </error>
152 |   <error id="nonreentrantFunctionsgetrpcent" severity="portability" msg="Found non reentrant function 'getrpcent'. For threadsafe applications it is recommended to use the reentrant replacement function 'getrpcent_r'" verbose="Found non reentrant function 'getrpcent'. For threadsafe applications it is recommended to use the reentrant replacement function 'getrpcent_r'">
153 |   </error>
154 |   <error id="nonreentrantFunctionsgetservbyname" severity="portability" msg="Found non reentrant function 'getservbyname'. For threadsafe applications it is recommended to use the reentrant replacement function 'getservbyname_r'" verbose="Found non reentrant function 'getservbyname'. For threadsafe applications it is recommended to use the reentrant replacement function 'getservbyname_r'">
155 |   </error>
156 |   <error id="nonreentrantFunctionsgetservbyport" severity="portability" msg="Found non reentrant function 'getservbyport'. For threadsafe applications it is recommended to use the reentrant replacement function 'getservbyport_r'" verbose="Found non reentrant function 'getservbyport'. For threadsafe applications it is recommended to use the reentrant replacement function 'getservbyport_r'">
157 |   </error>
158 |   <error id="nonreentrantFunctionsgetservent" severity="portability" msg="Found non reentrant function 'getservent'. For threadsafe applications it is recommended to use the reentrant replacement function 'getservent_r'" verbose="Found non reentrant function 'getservent'. For threadsafe applications it is recommended to use the reentrant replacement function 'getservent_r'">
159 |   </error>
160 |   <error id="nonreentrantFunctionsgetspent" severity="portability" msg="Found non reentrant function 'getspent'. For threadsafe applications it is recommended to use the reentrant replacement function 'getspent_r'" verbose="Found non reentrant function 'getspent'. For threadsafe applications it is recommended to use the reentrant replacement function 'getspent_r'">
161 |   </error>
162 |   <error id="nonreentrantFunctionsgetspnam" severity="portability" msg="Found non reentrant function 'getspnam'. For threadsafe applications it is recommended to use the reentrant replacement function 'getspnam_r'" verbose="Found non reentrant function 'getspnam'. For threadsafe applications it is recommended to use the reentrant replacement function 'getspnam_r'">
163 |   </error>
164 |   <error id="nonreentrantFunctionsgmtime" severity="portability" msg="Found non reentrant function 'gmtime'. For threadsafe applications it is recommended to use the reentrant replacement function 'gmtime_r'" verbose="Found non reentrant function 'gmtime'. For threadsafe applications it is recommended to use the reentrant replacement function 'gmtime_r'">
165 |   </error>
166 |   <error id="nonreentrantFunctionslocaltime" severity="portability" msg="Found non reentrant function 'localtime'. For threadsafe applications it is recommended to use the reentrant replacement function 'localtime_r'" verbose="Found non reentrant function 'localtime'. For threadsafe applications it is recommended to use the reentrant replacement function 'localtime_r'">
167 |   </error>
168 |   <error id="nonreentrantFunctionsreaddir" severity="portability" msg="Found non reentrant function 'readdir'. For threadsafe applications it is recommended to use the reentrant replacement function 'readdir_r'" verbose="Found non reentrant function 'readdir'. For threadsafe applications it is recommended to use the reentrant replacement function 'readdir_r'">
169 |   </error>
170 |   <error id="nonreentrantFunctionsstrtok" severity="portability" msg="Found non reentrant function 'strtok'. For threadsafe applications it is recommended to use the reentrant replacement function 'strtok_r'" verbose="Found non reentrant function 'strtok'. For threadsafe applications it is recommended to use the reentrant replacement function 'strtok_r'">
171 |   </error>
172 |   <error id="nonreentrantFunctionstempnam" severity="portability" msg="Found non reentrant function 'tempnam'. For threadsafe applications it is recommended to use the reentrant replacement function 'tempnam_r'" verbose="Found non reentrant function 'tempnam'. For threadsafe applications it is recommended to use the reentrant replacement function 'tempnam_r'">
173 |   </error>
174 |   <error id="nonreentrantFunctionsttyname" severity="portability" msg="Found non reentrant function 'ttyname'. For threadsafe applications it is recommended to use the reentrant replacement function 'ttyname_r'" verbose="Found non reentrant function 'ttyname'. For threadsafe applications it is recommended to use the reentrant replacement function 'ttyname_r'">
175 |   </error>
176 |   <error id="nullPointer" severity="error" msg="Possible null pointer dereference: pointer" verbose="Possible null pointer dereference: pointer">
177 |   </error>
178 |   <error id="obsoleteFunctionsasctime" severity="style" msg="Found obsolete function 'asctime'. It is recommended to use the function 'strftime' instead" verbose="Found obsolete function 'asctime'. It is recommended to use the function 'strftime' instead">
179 |   </error>
180 |   <error id="obsoleteFunctionsasctime_r" severity="style" msg="Found obsolete function 'asctime_r'. It is recommended to use the function 'strftime' instead" verbose="Found obsolete function 'asctime_r'. It is recommended to use the function 'strftime' instead">
181 |   </error>
182 |   <error id="obsoleteFunctionsbcmp" severity="style" msg="Found obsolete function 'bcmp'. It is recommended that new applications use the 'memcmp' function" verbose="Found obsolete function 'bcmp'. It is recommended that new applications use the 'memcmp' function">
183 |   </error>
184 |   <error id="obsoleteFunctionsbcopy" severity="style" msg="Found obsolete function 'bcopy'. It is recommended that new applications use the 'memmove' or 'memcpy' functions" verbose="Found obsolete function 'bcopy'. It is recommended that new applications use the 'memmove' or 'memcpy' functions">
185 |   </error>
186 |   <error id="obsoleteFunctionsbsd_signal" severity="style" msg="Found obsolete function 'bsd_signal'. It is recommended that new applications use the 'sigaction' function" verbose="Found obsolete function 'bsd_signal'. It is recommended that new applications use the 'sigaction' function">
187 |   </error>
188 |   <error id="obsoleteFunctionsbzero" severity="style" msg="Found obsolete function 'bzero'. It is recommended that new applications use the 'memset' function" verbose="Found obsolete function 'bzero'. It is recommended that new applications use the 'memset' function">
189 |   </error>
190 |   <error id="obsoleteFunctionsctime" severity="style" msg="Found obsolete function 'ctime'. It is recommended to use the function 'strftime' instead" verbose="Found obsolete function 'ctime'. It is recommended to use the function 'strftime' instead">
191 |   </error>
192 |   <error id="obsoleteFunctionsecvt" severity="style" msg="Found obsolete function 'ecvt'. It is recommended that new applications use the 'sprintf' function" verbose="Found obsolete function 'ecvt'. It is recommended that new applications use the 'sprintf' function">
193 |   </error>
194 |   <error id="obsoleteFunctionsfcvt" severity="style" msg="Found obsolete function 'fcvt'. It is recommended that new applications use the 'sprintf' function" verbose="Found obsolete function 'fcvt'. It is recommended that new applications use the 'sprintf' function">
195 |   </error>
196 |   <error id="obsoleteFunctionsftime" severity="style" msg="Found obsolete function 'ftime'." verbose="It is recommended that new applications use time(), gettimeofday(), or clock_gettime() instead. For high-resolution timing on Windows, QueryPerformanceCounter() and QueryPerformanceFrequency may be used.">
197 |   </error>
198 |   <error id="obsoleteFunctionsgcvt" severity="style" msg="Found obsolete function 'gcvt'. It is recommended that new applications use the 'sprintf' function" verbose="Found obsolete function 'gcvt'. It is recommended that new applications use the 'sprintf' function">
199 |   </error>
200 |   <error id="obsoleteFunctionsgetcontext" severity="style" msg="Found obsolete function 'getcontext'. Due to portability issues with this function, applications are recommended to be rewritten to use POSIX threads" verbose="Found obsolete function 'getcontext'. Due to portability issues with this function, applications are recommended to be rewritten to use POSIX threads">
201 |   </error>
202 |   <error id="obsoleteFunctionsgethostbyaddr" severity="style" msg="Found obsolete function 'gethostbyaddr'. It is recommended that new applications use the 'getnameinfo' function" verbose="Found obsolete function 'gethostbyaddr'. It is recommended that new applications use the 'getnameinfo' function">
203 |   </error>
204 |   <error id="obsoleteFunctionsgethostbyname" severity="style" msg="Found obsolete function 'gethostbyname'. It is recommended that new applications use the 'getaddrinfo' function" verbose="Found obsolete function 'gethostbyname'. It is recommended that new applications use the 'getaddrinfo' function">
205 |   </error>
206 |   <error id="obsoleteFunctionsgetwd" severity="style" msg="Found obsolete function 'getwd'. It is recommended that new applications use the 'getcwd' function" verbose="Found obsolete function 'getwd'. It is recommended that new applications use the 'getcwd' function">
207 |   </error>
208 |   <error id="obsoleteFunctionsindex" severity="style" msg="Found obsolete function 'index'. It is recommended to use the function 'strchr' instead" verbose="Found obsolete function 'index'. It is recommended to use the function 'strchr' instead">
209 |   </error>
210 |   <error id="obsoleteFunctionsmakecontext" severity="style" msg="Found obsolete function 'makecontext'. Due to portability issues with this function, applications are recommended to be rewritten to use POSIX threads" verbose="Found obsolete function 'makecontext'. Due to portability issues with this function, applications are recommended to be rewritten to use POSIX threads">
211 |   </error>
212 |   <error id="obsoleteFunctionspthread_attr_getstackaddr" severity="style" msg="Found obsolete function 'pthread_attr_getstackaddr'. It is recommended that new applications use the 'pthread_attr_getstack' function" verbose="Found obsolete function 'pthread_attr_getstackaddr'. It is recommended that new applications use the 'pthread_attr_getstack' function">
213 |   </error>
214 |   <error id="obsoleteFunctionspthread_attr_setstackaddr" severity="style" msg="Found obsolete function 'pthread_attr_setstackaddr'. It is recommended that new applications use the 'pthread_attr_setstack' function" verbose="Found obsolete function 'pthread_attr_setstackaddr'. It is recommended that new applications use the 'pthread_attr_setstack' function">
215 |   </error>
216 |   <error id="obsoleteFunctionsrand_r" severity="style" msg="Found obsolete function 'rand_r'. It is recommended to use the function 'rand' instead" verbose="Found obsolete function 'rand_r'. It is recommended to use the function 'rand' instead">
217 |   </error>
218 |   <error id="obsoleteFunctionsrindex" severity="style" msg="Found obsolete function 'rindex'. It is recommended to use the function 'strrchr' instead" verbose="Found obsolete function 'rindex'. It is recommended to use the function 'strrchr' instead">
219 |   </error>
220 |   <error id="obsoleteFunctionsscalbln" severity="style" msg="Found obsolete function 'scalb'. It is recommended to use either 'scalbln', 'scalblnf' or 'scalblnl' instead of this function" verbose="Found obsolete function 'scalb'. It is recommended to use either 'scalbln', 'scalblnf' or 'scalblnl' instead of this function">
221 |   </error>
222 |   <error id="obsoleteFunctionsswapcontext" severity="style" msg="Found obsolete function 'swapcontext'. Due to portability issues with this function, applications are recommended to be rewritten to use POSIX threads" verbose="Found obsolete function 'swapcontext'. Due to portability issues with this function, applications are recommended to be rewritten to use POSIX threads">
223 |   </error>
224 |   <error id="obsoleteFunctionstmpnam" severity="style" msg="Found obsolete function 'tmpnam'. It is recommended to use either 'tmpfile', 'mkstemp', or 'mkdtemp' instead for this function" verbose="Found obsolete function 'tmpnam'. It is recommended to use either 'tmpfile', 'mkstemp', or 'mkdtemp' instead for this function">
225 |   </error>
226 |   <error id="obsoleteFunctionstmpnam_r" severity="style" msg="Found obsolete function 'tmpnam_r'. It is recommended to use either 'tmpfile', 'mkstemp', or 'mkdtemp' instead for this function" verbose="Found obsolete function 'tmpnam_r'. It is recommended to use either 'tmpfile', 'mkstemp', or 'mkdtemp' instead for this function">
227 |   </error>
228 |   <error id="obsoleteFunctionsualarm" severity="style" msg="Found obsolete function 'ualarm'. It is recommended to use either 'timer_create', 'timer_delete', 'timer_getoverrun', 'timer_gettime', or 'timer_settime' instead of this function" verbose="Found obsolete function 'ualarm'. It is recommended to use either 'timer_create', 'timer_delete', 'timer_getoverrun', 'timer_gettime', or 'timer_settime' instead of this function">
229 |   </error>
230 |   <error id="obsoleteFunctionsusleep" severity="style" msg="Found obsolete function 'usleep'. It is recommended that new applications use the 'nanosleep' or 'setitimer' function" verbose="Found obsolete function 'usleep'. POSIX.1-2001 declares usleep() function obsolete and POSIX.1-2008 removes it. It is recommended that new applications use the 'nanosleep' or 'setitimer' function.">
231 |   </error>
232 |   <error id="obsoleteFunctionsutime" severity="style" msg="Found obsolete function 'utime'. It is recommended to use the function 'utimensat' instead" verbose="Found obsolete function 'utime'. It is recommended to use the function 'utimensat' instead">
233 |   </error>
234 |   <error id="obsoleteFunctionsvfork" severity="style" msg="Found obsolete function 'vfork'. It is recommended to use the function 'fork' instead" verbose="Found obsolete function 'vfork'. It is recommended to use the function 'fork' instead">
235 |   </error>
236 |   <error id="obsoleteFunctionswcswcs" severity="style" msg="Found obsolete function 'wcswcs'. It is recommended to use the function 'wcsstr' instead" verbose="Found obsolete function 'wcswcs'. It is recommended to use the function 'wcsstr' instead">
237 |   </error>
238 |   <error id="assignBoolToPointer" severity="error" msg="Assigning bool value to pointer (converting bool value to address)" verbose="Assigning bool value to pointer (converting bool value to address)">
239 |   </error>
240 |   <error id="sprintfOverlappingData" severity="error" msg="Undefined behavior: variable is used as parameter and destination in s[n]printf()." verbose="The variable 'varname' is used both as a parameter and as a destination in s[n]printf(). The origin and destination buffers overlap. Quote from glibc (C-library) documentation (http://www.gnu.org/software/libc/manual/html_mono/libc.html#Formatted-Output-Functions): 'If copying takes place between objects that overlap as a result of a call to sprintf() or snprintf(), the results are undefined.'">
241 |   </error>
242 |   <error id="udivError" severity="error" msg="Unsigned division. The result will be wrong." verbose="Unsigned division. The result will be wrong.">
243 |   </error>
244 |   <error id="zerodiv" severity="error" msg="Division by zero" verbose="Division by zero">
245 |   </error>
246 |   <error id="wrongmathcall" severity="error" msg="Passing value  to () leads to undefined result" verbose="Passing value  to () leads to undefined result">
247 |   </error>
248 |   <error id="fflushOnInputStream" severity="error" msg="fflush() called on input stream &quot;stdin&quot; may result in undefined behaviour" verbose="fflush() called on input stream &quot;stdin&quot; may result in undefined behaviour">
249 |   </error>
250 |   <error id="unusedScopedObject" severity="error" msg="instance of &quot;varname&quot; object destroyed immediately" verbose="instance of &quot;varname&quot; object destroyed immediately">
251 |   </error>
252 |   <error id="sizeofwithsilentarraypointer" severity="error" msg="Using sizeof for array given as function argument returns the size of pointer." verbose="Giving array as function parameter and then using sizeof-operator for the array argument. In this case the sizeof-operator returns the size of pointer (in the system). It does not return the size of the whole array in bytes as might be expected. For example, this code:&#xa;     int f(char a[100]) {&#xa;         return sizeof(a);&#xa;     }&#xa; returns 4 (in 32-bit systems) or 8 (in 64-bit systems) instead of 100 (the size of the array in bytes).">
253 |   </error>
254 |   <error id="pointerSize" severity="warning" msg="Using size of pointer varname instead of size of its data." verbose="Using size of pointer varname instead of size of its data. This is likely to lead to a buffer overflow. You probably intend to write sizeof(*varname)" inconclusive="true">
255 |   </error>
256 |   <error id="sizeofwithnumericparameter" severity="warning" msg="Using sizeof with a numeric constant as function argument might not be what you intended." verbose="It is unusual to use constant value with sizeof. For example, sizeof(10) returns 4 (in 32-bit systems) or 8 (in 64-bit systems) instead of 10. sizeof('A') and sizeof(char) can return different results.">
257 |   </error>
258 |   <error id="coutCerrMisusage" severity="error" msg="Invalid usage of output stream: '&lt;&lt; std::cout'." verbose="Invalid usage of output stream: '&lt;&lt; std::cout'.">
259 |   </error>
260 |   <error id="doubleFree" severity="error" msg="Memory pointed to by 'varname' is freed twice." verbose="Memory pointed to by 'varname' is freed twice.">
261 |   </error>
262 |   <error id="invalidPointerCast" severity="warning" msg="Casting between float* and double* which have an incompatible binary data representation" verbose="Casting between float* and double* which have an incompatible binary data representation">
263 |   </error>
264 |   <error id="cstyleCast" severity="style" msg="C-style pointer casting" verbose="C-style pointer casting">
265 |   </error>
266 |   <error id="dangerousUsageStrtol" severity="error" msg="Invalid radix in call to strtol or strtoul. Must be 0 or 2-36" verbose="Invalid radix in call to strtol or strtoul. Must be 0 or 2-36">
267 |   </error>
268 |   <error id="passedByValue" severity="performance" msg="Function parameter 'parametername' should be passed by reference." verbose="Parameter 'parametername' is passed as a value. It could be passed as a (const) reference which is usually faster and recommended in C++.">
269 |   </error>
270 |   <error id="constStatement" severity="warning" msg="Redundant code: Found a statement that begins with type constant" verbose="Redundant code: Found a statement that begins with type constant">
271 |   </error>
272 |   <error id="charArrayIndex" severity="warning" msg="Using char type as array index" verbose="Using signed char type as array index. If the value can be greater than 127 there will be a buffer overflow (because of sign extension).">
273 |   </error>
274 |   <error id="charBitOp" severity="warning" msg="When using char variables in bit operations, sign extension can generate unexpected results." verbose="When using char variables in bit operations, sign extension can generate unexpected results. For example:&#xa;    char c = 0x80;&#xa;    int i = 0 | c;&#xa;    if (i &amp; 0x8000)&#xa;        printf(&quot;not expected&quot;);&#xa;The 'not expected' will be printed on the screen.">
275 |   </error>
276 |   <error id="variableScope" severity="style" msg="The scope of the variable 'varname' can be reduced" verbose="The scope of the variable 'varname' can be reduced. Warning: It can be unsafe to fix this message. Be careful. Especially when there are inner loops. Here is an example where cppcheck will write that the scope for 'i' can be reduced:&#xa;void f(int x)&#xa;{&#xa;    int i = 0;&#xa;    if (x) {&#xa;        // it's safe to move 'int i = 0' here&#xa;        for (int n = 0; n &lt; 10; ++n) {&#xa;            // it is possible but not safe to move 'int i = 0' here&#xa;            do_something(&amp;i);&#xa;        }&#xa;    }&#xa;}&#xa;When you see this message it is always safe to reduce the variable scope 1 level.">
277 |   </error>
278 |   <error id="strPlusChar" severity="error" msg="Unusual pointer arithmetic" verbose="Unusual pointer arithmetic">
279 |   </error>
280 |   <error id="sizeofsizeof" severity="warning" msg="Calling sizeof for 'sizeof'." verbose="Calling sizeof for 'sizeof looks like a suspicious code and most likely there should be just one 'sizeof'. The current code is equivalent to 'sizeof(size_t)'">
281 |   </error>
282 |   <error id="sizeofCalculation" severity="warning" msg="Found calculation inside sizeof()" verbose="Found calculation inside sizeof()">
283 |   </error>
284 |   <error id="redundantAssignInSwitch" severity="warning" msg="Redundant assignment of &quot;varname&quot; in switch" verbose="Redundant assignment of &quot;varname&quot; in switch">
285 |   </error>
286 |   <error id="switchCaseFallThrough" severity="style" msg="Switch falls through case without comment" verbose="Switch falls through case without comment">
287 |   </error>
288 |   <error id="selfAssignment" severity="warning" msg="Redundant assignment of &quot;varname&quot; to itself" verbose="Redundant assignment of &quot;varname&quot; to itself">
289 |   </error>
290 |   <error id="assignmentInAssert" severity="warning" msg="Assert statement modifies 'varname'." verbose="Variable 'varname' is modified insert assert statement. Assert statements are removed from release builds so the code inside assert statement is not run. If the code is needed also in release builds this is a bug.">
291 |   </error>
292 |   <error id="invalidscanf" severity="warning" msg="scanf without field width limits can crash with huge input data" verbose="scanf without field width limits can crash with huge input data. To fix this error message add a field width specifier:&#xa;    %s =&gt; %20s&#xa;    %i =&gt; %3i&#xa;&#xa;Sample program that can crash:&#xa;&#xa;#include &lt;stdio.h&gt;&#xa;int main()&#xa;{&#xa;    int a;&#xa;    scanf(&quot;%i&quot;, &amp;a);&#xa;    return 0;&#xa;}&#xa;&#xa;To make it crash:&#xa;perl -e 'print &quot;5&quot;x2100000' | ./a.out">
293 |   </error>
294 |   <error id="incorrectLogicOperator" severity="warning" msg="Logical disjunction always evaluates to true: foo &gt; 3 &amp;&amp; foo &lt; 4." verbose="Are these conditions necessary? Did you intend to use &amp;&amp; instead? Are the numbers correct? Are you comparing the correct variables?">
295 |   </error>
296 |   <error id="redundantCondition" severity="style" msg="Redundant condition: If x &gt; 10 the condition x &gt; 11 is always true." verbose="Redundant condition: If x &gt; 10 the condition x &gt; 11 is always true.">
297 |   </error>
298 |   <error id="memsetZeroBytes" severity="warning" msg="memset() called to fill 0 bytes of 'varname'" verbose="memset() called to fill 0 bytes of 'varname'. Second and third arguments might be inverted.">
299 |   </error>
300 |   <error id="clarifyCalculation" severity="style" msg="Clarify calculation precedence for + and ?" verbose="Suspicious calculation. Please use parentheses to clarify the code. The code 'a+b?c:d' should be written as either '(a+b)?c:d' or 'a+(b?c:d)'.">
301 |   </error>
302 |   <error id="clarifyCondition" severity="style" msg="Suspicious condition (assignment+comparison), it can be clarified with parentheses" verbose="Suspicious condition (assignment+comparison), it can be clarified with parentheses">
303 |   </error>
304 |   <error id="incorrectStringCompare" severity="warning" msg="String literal &quot;Hello World&quot; doesn't match length argument for substr(12)." verbose="String literal &quot;Hello World&quot; doesn't match length argument for substr(12).">
305 |   </error>
306 |   <error id="incorrectStringBooleanError" severity="warning" msg="A boolean comparison with the string literal &quot;Hello World&quot; is always true." verbose="A boolean comparison with the string literal &quot;Hello World&quot; is always true.">
307 |   </error>
308 |   <error id="incrementboolean" severity="style" msg="The use of a variable of type bool with the ++ postfix operator is always true and deprecated by the C++ Standard." verbose="The operand of a postfix increment operator may be of type bool but it is deprecated by C++ Standard (Annex D-1) and the operand is always set to true.">
309 |   </error>
310 |   <error id="comparisonOfBoolWithInt" severity="warning" msg="Comparison of a boolean with an integer that is neither 1 nor 0" verbose="The expression &quot;varname&quot; is of type 'bool' and it is compared against a integer value that is neither 1 nor 0.">
311 |   </error>
312 |   <error id="duplicateIf" severity="style" msg="Found duplicate if expressions." verbose="Finding the same expression more than once is suspicious and might indicate a cut and paste or logic error. Please examine this code carefully to determine if it is correct.">
313 |   </error>
314 |   <error id="duplicateBranch" severity="style" msg="Found duplicate branches for if and else." verbose="Finding the same code for an if branch and an else branch is suspicious and might indicate a cut and paste or logic error. Please examine this code carefully to determine if it is correct.">
315 |   </error>
316 |   <error id="duplicateExpression" severity="style" msg="Same expression on both sides of '&amp;&amp;'." verbose="Finding the same expression on both sides of an operator is suspicious and might indicate a cut and paste or logic error. Please examine this code carefully to determine if it is correct.">
317 |   </error>
318 |   <error id="staticStringCompare" severity="warning" msg="Unnecessary comparision of static strings." verbose="The compared strings, 'str1' and 'str2', are always unequal. Therefore the comparision is unnecessary and looks suspicious.">
319 |   </error>
320 |   <error id="stringCompare" severity="warning" msg="Comparison of identical string variables." verbose="The compared strings, 'varname1' and 'varname2', are identical. This could be a logic bug.">
321 |   </error>
322 |   <error id="duplicateBreak" severity="style" msg="Consecutive return, break, continue, goto or throw statements are unnecessary." verbose="The second of the two statements can never be executed, and so should be removed.">
323 |   </error>
324 |   <error id="unreachableCode" severity="style" msg="Statements following return, break, continue, goto or throw will never be executed." verbose="Statements following return, break, continue, goto or throw will never be executed.">
325 |   </error>
326 |   <error id="unsignedLessThanZero" severity="style" msg="Checking if unsigned variable 'varname' is less than zero." verbose="The unsigned variable 'varname' will never be negative so itis either pointless or an error to check if it is.">
327 |   </error>
328 |   <error id="unsignedPositive" severity="style" msg="An unsigned variable 'varname' can't be negative so it is unnecessary to test it." verbose="An unsigned variable 'varname' can't be negative so it is unnecessary to test it.">
329 |   </error>
330 |   <error id="bitwiseOnBoolean" severity="style" msg="Boolean variable 'varname' is used in bitwise operation. Did you mean &amp;&amp; ?" verbose="Boolean variable 'varname' is used in bitwise operation. Did you mean &amp;&amp; ?" inconclusive="true">
331 |   </error>
332 |   <error id="compareBoolExpressionWithInt" severity="warning" msg="Comparison of a boolean expression with an integer other than 0 or 1." verbose="Comparison of a boolean expression with an integer other than 0 or 1.">
333 |   </error>
334 |   <error id="suspiciousSemicolon" severity="warning" msg="Suspicious use of ; at the end of 'if/for/while' statement." verbose="Suspicious use of ; at the end of 'if/for/while' statement." inconclusive="true">
335 |   </error>
336 |   <error id="wrongPrintfScanfArgNum" severity="error" msg="printf format string has 3 parameters but only 2 are given" verbose="printf format string has 3 parameters but only 2 are given">
337 |   </error>
338 |   <error id="invalidScanfArgType" severity="warning" msg="scanf argument no. 1: requires non-const pointers or arrays as arguments" verbose="scanf argument no. 1: requires non-const pointers or arrays as arguments">
339 |   </error>
340 |   <error id="invalidPrintfArgType_s" severity="warning" msg="%s in format string (no. 1) requires a char* given in the argument list" verbose="%s in format string (no. 1) requires a char* given in the argument list">
341 |   </error>
342 |   <error id="invalidPrintfArgType_n" severity="warning" msg="%n in format string (no. 1) requires a pointer to an non-const integer given in the argument list" verbose="%n in format string (no. 1) requires a pointer to an non-const integer given in the argument list">
343 |   </error>
344 |   <error id="invalidPrintfArgType_p" severity="warning" msg="%p in format string (no. 1) requires an integer or pointer given in the argument list" verbose="%p in format string (no. 1) requires an integer or pointer given in the argument list">
345 |   </error>
346 |   <error id="invalidPrintfArgType_int" severity="warning" msg="%u in format string (no. 1) requires an integer given in the argument list" verbose="%u in format string (no. 1) requires an integer given in the argument list">
347 |   </error>
348 |   <error id="invalidPrintfArgType_float" severity="warning" msg="%f in format string (no. 1) requires a floating point number given in the argument list" verbose="%f in format string (no. 1) requires a floating point number given in the argument list">
349 |   </error>
350 |   <error id="wrongcctypecall" severity="error" msg="Passing value value to funname() cause undefined behavior, which may lead to a crash" verbose="Passing value value to funname() cause undefined behavior, which may lead to a crash">
351 |   </error>
352 |   <error id="invalidIterator1" severity="error" msg="Invalid iterator: iterator" verbose="Invalid iterator: iterator">
353 |   </error>
354 |   <error id="iterators" severity="error" msg="Same iterator is used with both container1 and container2" verbose="Same iterator is used with both container1 and container2">
355 |   </error>
356 |   <error id="mismatchingContainers" severity="error" msg="mismatching containers" verbose="mismatching containers">
357 |   </error>
358 |   <error id="eraseDereference" severity="error" msg="Dereferenced iterator 'iter' has been erased" verbose="Dereferenced iterator 'iter' has been erased">
359 |   </error>
360 |   <error id="stlOutOfBounds" severity="error" msg="When i==foo.size(), foo[i] is out of bounds" verbose="When i==foo.size(), foo[i] is out of bounds">
361 |   </error>
362 |   <error id="erase" severity="error" msg="Dangerous iterator usage after erase()-method." verbose="The iterator is invalid after it has been used in erase() function. Dereferencing or comparing it with another iterator is invalid operation.">
363 |   </error>
364 |   <error id="invalidIterator2" severity="error" msg="After push_back|push_front|insert, the iterator 'iterator' may be invalid" verbose="After push_back|push_front|insert, the iterator 'iterator' may be invalid">
365 |   </error>
366 |   <error id="invalidPointer" severity="error" msg="Invalid pointer 'pointer' after push_back / push_front" verbose="Invalid pointer 'pointer' after push_back / push_front">
367 |   </error>
368 |   <error id="stlBoundries" severity="error" msg="Dangerous container iterator compare using &lt; operator for container" verbose="Container 'container' iterator compared with &lt; operator. Using &lt; operator with container type iterators is dangerous since the order of the items is not guaranteed. One should use != operator instead when comparing iterators in the container.">
369 |   </error>
370 |   <error id="stlIfFind" severity="warning" msg="Suspicious condition. The result of find is an iterator, but it is not properly checked." verbose="Suspicious condition. The result of find is an iterator, but it is not properly checked.">
371 |   </error>
372 |   <error id="stlIfStrFind" severity="performance" msg="Inefficient usage of string::find in condition; string::compare would be faster." verbose="Either inefficent or wrong usage of string::find. string::compare will be faster if string::find's result is compared with 0, because it will not scan the whole string. If your intention is to check that there are no findings in the string, you should compare with string::npos.">
373 |   </error>
374 |   <error id="stlcstr" severity="error" msg="Dangerous usage of c_str(). The returned value by c_str() is invalid after this call." verbose="Dangerous usage of c_str(). The c_str() return value is only valid until its string is deleted.">
375 |   </error>
376 |   <error id="stlcstrReturn" severity="performance" msg="Returning the result of c_str() in a function that returns std::string is slow and redundant." verbose="The conversion from const char* as returned by c_str to std::string creates an unecessary string copy. Solve that by directly returning the string.">
377 |   </error>
378 |   <error id="stlcstrParam" severity="performance" msg="Passing the result of c_str() to a function that takes std::string as argument 0 is slow and redundant." verbose="The conversion from const char* as returned by c_str to std::string creates an unecessary string copy. Solve that by directly passing the string.">
379 |   </error>
380 |   <error id="stlSize" severity="performance" msg="Possible inefficient checking for 'list' emptiness." verbose="Checking for 'list' emptiness might be inefficient. Using list.empty() instead of list.size() can be faster. list.size() can take linear time but list.empty() is guaranteed to take constant time.">
381 |   </error>
382 |   <error id="redundantIfRemove" severity="style" msg="Redundant checking of STL container element." verbose="Redundant checking of STL container element existence before removing it. The remove method in the STL will not do anything if element doesn't exist">
383 |   </error>
384 |   <error id="useAutoPointerCopy" severity="style" msg="Copy 'auto_ptr' pointer to another do not create two equal objects since one has lost its ownership of the pointer." verbose="The auto_ptr has semantics of strict ownership, meaning that the auto_ptr instance is the sole entity responsible for the object's lifetime. If an auto_ptr is copied, the source loses the reference.">
385 |   </error>
386 |   <error id="useAutoPointerContainer" severity="error" msg="You can randomly lose access to pointers if you store 'auto_ptr' pointers in a container because the copy-semantics of 'auto_ptr' are not compatible with containers." verbose="An element of container must be able to be copied but 'auto_ptr' does not fulfill this requirement. You should consider to use 'shared_ptr' or 'unique_ptr'. It is suitable for use in containers, because they no longer copy their values, they move them.">
387 |   </error>
388 |   <error id="useAutoPointerArray" severity="error" msg="Object pointed by an 'auto_ptr' is destroyed using operator 'delete'. You should not use 'auto_ptr' for pointers obtained with operator 'new[]'." verbose="Object pointed by an 'auto_ptr' is destroyed using operator 'delete'. This means that you should only use 'auto_ptr' for pointers obtained with operator 'new'. This excludes arrays, which are allocated by operator 'new[]' and must be deallocated by operator 'delete[]'.">
389 |   </error>
390 |   <error id="uselessCallsCompare" severity="warning" msg="It is inefficient to call 'str.find(str)' as it always returns 0." verbose="The 'std::string::find()' returns zero when given itself as parameter (str.find(str)). As it is currently the code is inefficient. It is also possible either the string searched ('str') or searched for ('str') is wrong/mixed in the code?">
391 |   </error>
392 |   <error id="uselessCallsSwap" severity="performance" msg="It is inefficient to swap a object with itself by calling 'str.swap(str)'" verbose="The 'swap()' function has no logical effect when given itself as parameter (str.swap(str)). As it is currently the code is inefficient. It is possible either the object or the parameter is wrong/mixed in the code?">
393 |   </error>
394 |   <error id="uselessCallsSubstr" severity="performance" msg="Useless call of function 'substr' because it returns a copy of the object. Use operator= instead." verbose="Useless call of function 'substr' because it returns a copy of the object. Use operator= instead.">
395 |   </error>
396 |   <error id="uninitstring" severity="error" msg="Dangerous usage of 'varname' (strncpy doesn't always 0-terminate it)" verbose="Dangerous usage of 'varname' (strncpy doesn't always 0-terminate it)">
397 |   </error>
398 |   <error id="uninitdata" severity="error" msg="Data is allocated but not initialized: varname" verbose="Data is allocated but not initialized: varname">
399 |   </error>
400 |   <error id="uninitvar" severity="error" msg="Uninitialized variable: varname" verbose="Uninitialized variable: varname">
401 |   </error>
402 |   <error id="unusedFunction" severity="style" msg="The function 'funcName' is never used" verbose="The function 'funcName' is never used">
403 |   </error>
404 |   <error id="unusedVariable" severity="style" msg="Unused variable: varname" verbose="Unused variable: varname">
405 |   </error>
406 |   <error id="unusedAllocatedMemory" severity="style" msg="Variable 'varname' is allocated memory that is never used" verbose="Variable 'varname' is allocated memory that is never used">
407 |   </error>
408 |   <error id="unreadVariable" severity="style" msg="Variable 'varname' is assigned a value that is never used" verbose="Variable 'varname' is assigned a value that is never used">
409 |   </error>
410 |   <error id="unassignedVariable" severity="style" msg="Variable 'varname' is not assigned a value" verbose="Variable 'varname' is not assigned a value">
411 |   </error>
412 |   <error id="unusedStructMember" severity="style" msg="struct or union member 'structname::variable' is never used" verbose="struct or union member 'structname::variable' is never used">
413 |   </error>
414 |   <error id="postfixOperator" severity="performance" msg="Prefer prefix ++/-- operators for non-primitive types." verbose="Prefix ++/-- operators should be preferred for non-primitive types. Pre-increment/decrement can be more efficient than post-increment/decrement. Post-increment/decrement usually involves keeping a copy of the previous value around and adds a little extra code.">
415 |   </error>
416 |   <error id="syntaxError" severity="error" msg="Invalid number of character ( ) when these macros are defined: ''." verbose="Invalid number of character ( ) when these macros are defined: ''.">
417 |   </error>
418 |   <error id="cppcheckError" severity="error" msg="Analysis failed. If the code is valid then please report this failure." verbose="Analysis failed. If the code is valid then please report this failure.">
419 |   </error>
420 |   <error id="variableHidingTypedef" severity="style" msg="Variable 'name' hides typedef with same name" verbose="Variable 'name' hides typedef with same name" inconclusive="true">
421 |   </error>
422 |   <error id="unnecessaryForwardDeclaration" severity="style" msg="Variable 'name' forward declaration unnecessary, already declared" verbose="Variable 'name' forward declaration unnecessary, already declared">
423 |   </error>
424 |   <error id="variableHidingEnum" severity="style" msg="Variable 'name' hides enumerator with same name" verbose="Variable 'name' hides enumerator with same name">
425 |   </error>
426 |   <error id="unnecessaryQualification" severity="portability" msg="Extra qualification 'type' unnecessary and considered an error by many compilers." verbose="Extra qualification 'type' unnecessary and considered an error by many compilers.">
427 |   </error>
428 |   <error id="missingInclude" severity="information" msg="Include file: &quot;&quot; not found." verbose="Include file: &quot;&quot; not found.">
429 |   </error>
430 |   <error id="preprocessorErrorDirective" severity="error" msg="#error message" verbose="#error message">
431 |   </error>
432 |   </errors>
433 | </results>
434 | 


--------------------------------------------------------------------------------
/src/main/files/cppcheck_replacements.properties:
--------------------------------------------------------------------------------
  1 | multiCondition=S1862
  2 | duplicateIf=S1862
  3 | 
  4 | selfAssignment=S1656
  5 | duplicateExpression=S1764
  6 | unreachableCode=S1763
  7 | sizeofsizeof=SizeofSizeof
  8 | sizeofCalculation=SideEffectInSizeOf
  9 | operatorEqRetRefThis=S1236
 10 | operatorEqToSelf=S1250
 11 | postfixOperator=S1705
 12 | preprocessorErrorDirective=PPErrorDirectiveReached
 13 | catchExceptionByValue=S1044
 14 | clarifyCalculation=S864
 15 | switchCaseFallThrough=NonEmptyCaseWithoutBreak
 16 | exceptThrowInDestructor=ExceptionInDestructor
 17 | suspiciousEqualityComparison=S905
 18 | constStatement=S905
 19 | commaSeparatedReturn=S878
 20 | incrementboolean=S2668
 21 | duplicateBranch=S1871
 22 | cstyleCast=S871
 23 | sizeofVoid=S2665
 24 | sizeofDereferencedVoidPointer=S2665
 25 | initializerList=S3229:cpp
 26 | virtualDestructor=S1235:cpp
 27 | 
 28 | nonreentrantFunctionsasctime=NonReentrantFunction
 29 | nonreentrantFunctionscrypt=NonReentrantFunction
 30 | nonreentrantFunctionsctermid=NonReentrantFunction
 31 | nonreentrantFunctionsctime=NonReentrantFunction
 32 | nonreentrantFunctionsecvt=NonReentrantFunction
 33 | nonreentrantFunctionsfcvt=NonReentrantFunction
 34 | nonreentrantFunctionsfgetgrent=NonReentrantFunction
 35 | nonreentrantFunctionsfgetpwent=NonReentrantFunction
 36 | nonreentrantFunctionsfgetspent=NonReentrantFunction
 37 | nonreentrantFunctionsgcvt=NonReentrantFunction
 38 | nonreentrantFunctionsgetgrent=NonReentrantFunction
 39 | nonreentrantFunctionsgetgrgid=NonReentrantFunction
 40 | nonreentrantFunctionsgetgrnam=NonReentrantFunction
 41 | nonreentrantFunctionsgethostbyaddr=NonReentrantFunction
 42 | nonreentrantFunctionsgethostbyname=NonReentrantFunction
 43 | nonreentrantFunctionsgethostbyname2=NonReentrantFunction
 44 | nonreentrantFunctionsgethostent=NonReentrantFunction
 45 | nonreentrantFunctionsgetlogin=NonReentrantFunction
 46 | nonreentrantFunctionsgetnetbyaddr=NonReentrantFunction
 47 | nonreentrantFunctionsgetnetbyname=NonReentrantFunction
 48 | nonreentrantFunctionsgetnetgrent=NonReentrantFunction
 49 | nonreentrantFunctionsgetprotobyname=NonReentrantFunction
 50 | nonreentrantFunctionsgetpwent=NonReentrantFunction
 51 | nonreentrantFunctionsgetpwnam=NonReentrantFunction
 52 | nonreentrantFunctionsgetpwuid=NonReentrantFunction
 53 | nonreentrantFunctionsgetrpcbyname=NonReentrantFunction
 54 | nonreentrantFunctionsgetrpcbynumber=NonReentrantFunction
 55 | nonreentrantFunctionsgetrpcent=NonReentrantFunction
 56 | nonreentrantFunctionsgetservbyname=NonReentrantFunction
 57 | nonreentrantFunctionsgetservbyport=NonReentrantFunction
 58 | nonreentrantFunctionsgetservent=NonReentrantFunction
 59 | nonreentrantFunctionsgetspent=NonReentrantFunction
 60 | nonreentrantFunctionsgetspnam=NonReentrantFunction
 61 | nonreentrantFunctionsgmtime=NonReentrantFunction
 62 | nonreentrantFunctionslocaltime=NonReentrantFunction
 63 | nonreentrantFunctionsrand=NonReentrantFunction
 64 | nonreentrantFunctionsreaddir=NonReentrantFunction
 65 | nonreentrantFunctionsstrtok=NonReentrantFunction
 66 | nonreentrantFunctionstempnam=NonReentrantFunction
 67 | nonreentrantFunctionstmpnam=NonReentrantFunction
 68 | nonreentrantFunctionsttyname=NonReentrantFunction
 69 | 
 70 | obsoleteFunctionsasctime=ObsoletePosixFunction
 71 | obsoleteFunctionsasctime_r=ObsoletePosixFunction
 72 | obsoleteFunctionsbcmp=ObsoletePosixFunction
 73 | obsoleteFunctionsbcopy=ObsoletePosixFunction
 74 | obsoleteFunctionsbsd_signal=ObsoletePosixFunction
 75 | obsoleteFunctionsbzero=ObsoletePosixFunction
 76 | obsoleteFunctionsctime=ObsoletePosixFunction
 77 | obsoleteFunctionsctime_r=ObsoletePosixFunction
 78 | obsoleteFunctionsecvt=ObsoletePosixFunction
 79 | obsoleteFunctionsfcvt=ObsoletePosixFunction
 80 | obsoleteFunctionsftime=ObsoletePosixFunction
 81 | obsoleteFunctionsgcvt=ObsoletePosixFunction
 82 | obsoleteFunctionsgetcontext=ObsoletePosixFunction
 83 | obsoleteFunctionsgethostbyaddr=ObsoletePosixFunction
 84 | obsoleteFunctionsgethostbyname=ObsoletePosixFunction
 85 | obsoleteFunctionsgetwd=ObsoletePosixFunction
 86 | obsoleteFunctionsindex=ObsoletePosixFunction
 87 | obsoleteFunctionsmakecontext=ObsoletePosixFunction
 88 | obsoleteFunctionspthread_attr_getstackaddr=ObsoletePosixFunction
 89 | obsoleteFunctionspthread_attr_setstackaddr=ObsoletePosixFunction
 90 | obsoleteFunctionsrand_r=ObsoletePosixFunction
 91 | obsoleteFunctionsrindex=ObsoletePosixFunction
 92 | obsoleteFunctionsscalbln=ObsoletePosixFunction
 93 | obsoleteFunctionsswapcontext=ObsoletePosixFunction
 94 | obsoleteFunctionstmpnam=ObsoletePosixFunction
 95 | obsoleteFunctionstmpnam_r=ObsoletePosixFunction
 96 | obsoleteFunctionsualarm=ObsoletePosixFunction
 97 | obsoleteFunctionsusleep=ObsoletePosixFunction
 98 | obsoleteFunctionsutime=ObsoletePosixFunction
 99 | obsoleteFunctionsvfork=ObsoletePosixFunction
100 | obsoleteFunctionswcswcs=ObsoletePosixFunction
101 | 
102 | bitwiseOnBoolean=S872
103 | comparisonOfBoolWithBoolError=S872
104 | comparisonOfFuncReturningBoolError=S872
105 | comparisonOfTwoFuncsReturningBoolError=S872
106 | 
107 | unusedScopedObject=S1481
108 | unusedVariable=S1481
109 | 
110 | coutCerrMisusage=S106:cpp
111 | duplicateBreak=S1763
112 | invalidscanf=S1079
113 | missingScanfFormatWidth=S1079
114 | clarifyCondition=S864
115 | unnecessaryForwardDeclaration=S3231
116 | useInitializationList=S3230:cpp
117 | 
118 | unsignedLessThanZero=S1768
119 | unsignedPositive=S1768
120 | 
121 | duplicateExpressionTernary=S1871
122 | noExplicitConstructor=S1709:cpp
123 | unusedLabel=S1065
124 | duplInheritedMember=S2387
125 | 


--------------------------------------------------------------------------------
/src/main/files/export-rules.sh:
--------------------------------------------------------------------------------
 1 | #! /bin/bash
 2 | 
 3 | set -e
 4 | SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 5 | PROJECT_DIR="$(readlink -f "$SCRIPT_DIR/../../..")"
 6 | TARGET_DIR="$PROJECT_DIR/target"
 7 | 
 8 | function check_project_dir_and_create_target_dir {
 9 |   if [ ! -f "$PROJECT_DIR/pom.xml" ]; then
10 |     echo "ERROR, invalid project folder '$PROJECT_DIR' missing 'pom.xml'" 1>&2
11 |     return 1
12 |   fi
13 |   mkdir -p "$TARGET_DIR"
14 | }
15 | 
16 | function prepare_working_dir {
17 |   local WORKING_DIR="$1"
18 |   echo "Working dir : $WORKING_DIR"
19 |   if [ -d "$WORKING_DIR" ]; then
20 |     rm -r "$WORKING_DIR"
21 |   fi
22 |   mkdir "$WORKING_DIR"
23 | }
24 | 
25 | function download_source {
26 |   local SRC_URL="$1"
27 |   local TARGET_FILE="$2"
28 |   echo "Downloading : $SRC_URL"
29 |   echo "Into        : $TARGET_FILE"
30 |   curl --location --max-redirs 10 -o "$TARGET_FILE" "$SRC_URL"
31 | }
32 | 
33 | function unzip_source {
34 |   local WORKING_DIR="$1"
35 |   local SRC_FILE="$2"
36 |   tar -zxf "$SRC_FILE" --directory "$WORKING_DIR"
37 | }
38 | 
39 | function compile_source {
40 |   local WORKING_DIR="$1"
41 |   echo "Compiling   : $WORKING_DIR"
42 |   (
43 |     cd "$WORKING_DIR"
44 |     make
45 |   )
46 | }
47 | 
48 | function run_cppcheck_to_export_rules {
49 |   local CPPCHECK_DIR="$1"
50 |   local OUTPUT_FILE="$2"
51 |   echo "Exporting   : $OUTPUT_FILE"
52 |   (
53 |     cd "$CPPCHECK_DIR"
54 |     ./cppcheck --xml --xml-version=2 --errorlist > "$OUTPUT_FILE"
55 |   )
56 | }
57 | 
58 | function export_rules {
59 |   local VERSION="$1"
60 |   echo "___________________________________________________________"
61 |   echo "Exporting cppcheck version $VERSION"
62 |   local WORKING_DIR="$TARGET_DIR/cppcheck-export-$VERSION"
63 |   local SRC_URL="http://sourceforge.net/projects/cppcheck/files/cppcheck/$VERSION/cppcheck-$VERSION.tar.gz/download"
64 |   local SRC_FILE="cppcheck-$VERSION.tar.gz"
65 |   local CPPCHECK_DIR="$WORKING_DIR/cppcheck-$VERSION"
66 | 
67 |   prepare_working_dir "$WORKING_DIR"
68 |   download_source "$SRC_URL" "$WORKING_DIR/$SRC_FILE"
69 |   unzip_source "$WORKING_DIR" "$WORKING_DIR/$SRC_FILE"
70 |   compile_source "$CPPCHECK_DIR"
71 |   run_cppcheck_to_export_rules "$CPPCHECK_DIR" "$SCRIPT_DIR/cppcheck-$VERSION.xml"
72 |   echo "-- success --"
73 |   echo
74 | }
75 | 
76 | check_project_dir_and_create_target_dir
77 | 
78 | if [ -z "$1" ]; then
79 |   echo "ERROR, please provide a list of cppcheck version" 1>&2
80 |   echo "Example: ./export-rules.sh 1.68 1.69 1.70" 1>&2
81 | else
82 |   for VERSION in "$@"; do
83 |     export_rules "$VERSION"
84 |   done
85 | fi
86 | 


--------------------------------------------------------------------------------
/src/main/java/org/sonarqube/cppcheck/CppcheckConfiguration.java:
--------------------------------------------------------------------------------
 1 | /*
 2 |  * SonarQube :: Cppcheck Plugin
 3 |  * Copyright (C) 2016-2016 SonarSource SA
 4 |  * mailto:contact AT sonarsource DOT com
 5 |  *
 6 |  * This program is free software; you can redistribute it and/or
 7 |  * modify it under the terms of the GNU Lesser General Public
 8 |  * License as published by the Free Software Foundation; either
 9 |  * version 3 of the License, or (at your option) any later version.
10 |  *
11 |  * This program is distributed in the hope that it will be useful,
12 |  * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 |  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
14 |  * Lesser General Public License for more details.
15 |  *
16 |  * You should have received a copy of the GNU Lesser General Public License
17 |  * along with this program; if not, write to the Free Software Foundation,
18 |  * Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
19 |  */
20 | package org.sonarqube.cppcheck;
21 | 
22 | import com.google.common.base.Strings;
23 | import org.sonar.api.BatchExtension;
24 | import org.sonar.api.config.Settings;
25 | import org.sonar.api.utils.SonarException;
26 | 
27 | import java.io.File;
28 | 
29 | public class CppcheckConfiguration implements BatchExtension {
30 | 
31 |   public static final String CPPCHECK_REPORT_PATH_PROPERTY = "sonar.cppcheck.reportPath";
32 | 
33 |   private final Settings settings;
34 | 
35 |   public CppcheckConfiguration(Settings settings) {
36 |     this.settings = settings;
37 |   }
38 | 
39 |   public File getCppcheckReportFile() {
40 |     String cppcheckReportPath = settings.getString(CPPCHECK_REPORT_PATH_PROPERTY);
41 |     if (Strings.isNullOrEmpty(cppcheckReportPath)) {
42 |       throw new SonarException("Cppcheck report property found empty, you should run cppcheck externally and " +
43 |         "import its report using " + CppcheckConfiguration.CPPCHECK_REPORT_PATH_PROPERTY + " property, for more information see the plugin documentation.");
44 |     }
45 |     File executable = new File(cppcheckReportPath);
46 |     if (!executable.isFile()) {
47 |       throw new SonarException("Cppcheck report is not found, please check property '" + CPPCHECK_REPORT_PATH_PROPERTY + "': " + cppcheckReportPath);
48 |     }
49 |     return executable;
50 |   }
51 | 
52 | }
53 | 


--------------------------------------------------------------------------------
/src/main/java/org/sonarqube/cppcheck/CppcheckPlugin.java:
--------------------------------------------------------------------------------
 1 | /*
 2 |  * SonarQube :: Cppcheck Plugin
 3 |  * Copyright (C) 2016-2016 SonarSource SA
 4 |  * mailto:contact AT sonarsource DOT com
 5 |  *
 6 |  * This program is free software; you can redistribute it and/or
 7 |  * modify it under the terms of the GNU Lesser General Public
 8 |  * License as published by the Free Software Foundation; either
 9 |  * version 3 of the License, or (at your option) any later version.
10 |  *
11 |  * This program is distributed in the hope that it will be useful,
12 |  * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 |  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
14 |  * Lesser General Public License for more details.
15 |  *
16 |  * You should have received a copy of the GNU Lesser General Public License
17 |  * along with this program; if not, write to the Free Software Foundation,
18 |  * Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
19 |  */
20 | package org.sonarqube.cppcheck;
21 | 
22 | import com.google.common.collect.ImmutableList;
23 | import org.sonar.api.SonarPlugin;
24 | import org.sonar.api.config.PropertyDefinition;
25 | import org.sonar.api.resources.Qualifiers;
26 | 
27 | import java.util.List;
28 | 
29 | public class CppcheckPlugin extends SonarPlugin {
30 | 
31 |   private static final String CPPCHECK_SUBCATEGORY = "Cppcheck";
32 | 
33 |   @Override
34 |   public List getExtensions() {
35 |     ImmutableList.Builder<Object> builder = ImmutableList.builder();
36 |     builder.add(CppcheckSensor.class);
37 |     builder.add(CppcheckConfiguration.class);
38 |     builder.add(new CppcheckRuleRepository("c"));
39 |     builder.add(new CppcheckRuleRepository("cpp"));
40 |     builder.add(PropertyDefinition.builder(CppcheckConfiguration.CPPCHECK_REPORT_PATH_PROPERTY)
41 |       .subCategory(CPPCHECK_SUBCATEGORY)
42 |       .name("Cppcheck Report Path")
43 |       .description("Path to the CppCheck XML report, ex: report/cppcheck.xml")
44 |       .onQualifiers(Qualifiers.PROJECT)
45 |       .build());
46 |     return builder.build();
47 |   }
48 | 
49 | }
50 | 


--------------------------------------------------------------------------------
/src/main/java/org/sonarqube/cppcheck/CppcheckRuleRepository.java:
--------------------------------------------------------------------------------
 1 | /*
 2 |  * SonarQube :: Cppcheck Plugin
 3 |  * Copyright (C) 2016-2016 SonarSource SA
 4 |  * mailto:contact AT sonarsource DOT com
 5 |  *
 6 |  * This program is free software; you can redistribute it and/or
 7 |  * modify it under the terms of the GNU Lesser General Public
 8 |  * License as published by the Free Software Foundation; either
 9 |  * version 3 of the License, or (at your option) any later version.
10 |  *
11 |  * This program is distributed in the hope that it will be useful,
12 |  * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 |  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
14 |  * Lesser General Public License for more details.
15 |  *
16 |  * You should have received a copy of the GNU Lesser General Public License
17 |  * along with this program; if not, write to the Free Software Foundation,
18 |  * Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
19 |  */
20 | package org.sonarqube.cppcheck;
21 | 
22 | import com.google.common.collect.Lists;
23 | import org.apache.commons.lang.StringUtils;
24 | import org.sonar.api.rules.Rule;
25 | import org.sonar.api.rules.RulePriority;
26 | import org.sonar.api.rules.RuleRepository;
27 | import org.sonar.api.utils.SonarException;
28 | 
29 | import javax.xml.stream.XMLStreamException;
30 | import java.io.InputStream;
31 | import java.util.Collection;
32 | import java.util.List;
33 | 
34 | public class CppcheckRuleRepository extends RuleRepository {
35 | 
36 |   static final String REPOSITORY_KEY = "cppcheck";
37 |   private static final String REPOSITORY_NAME = "Cppcheck";
38 | 
39 |   public CppcheckRuleRepository(String language) {
40 |     super(repositoryKeyForLanguage(language), language);
41 |     setName(REPOSITORY_NAME);
42 |   }
43 | 
44 |   @Override
45 |   public List<Rule> createRules() {
46 |     List<Rule> rules = Lists.newArrayList();
47 |     for (CppcheckXmlParser.Message message : load()) {
48 |       Rule rule = Rule.create()
49 |         .setKey(message.getId())
50 |         .setConfigKey(message.getId())
51 |         .setSeverity(RulePriority.MAJOR)
52 |         .setName(message.getMsg())
53 |         .setDescription("<p>" + message.getVerbose() + "</p>");
54 | 
55 |       String replacement = message.getReplacement();
56 |       if (replacement != null) {
57 |         rule.setStatus(Rule.STATUS_DEPRECATED);
58 |         String [] pieces = StringUtils.split(replacement, ':');
59 |         if (pieces.length == 1 || pieces[1].equalsIgnoreCase(getLanguage())) {
60 |           rule.setDescription(rule.getDescription() + "<h2>Deprecated</h2><p>This rule is deprecated, use {rule:" + getLanguage() + ":" + pieces[0] + "} instead.</p>");
61 |           rules.add(rule);
62 |         }
63 |       } else {
64 |         rules.add(rule);
65 |       }
66 |     }
67 |     return rules;
68 |   }
69 | 
70 |   private Collection<CppcheckXmlParser.Message> load() {
71 |     InputStream is = getClass().getResourceAsStream("/org/sonarqube/cppcheck.xml");
72 |     try {
73 |       return CppcheckXmlParser.parse(is);
74 |     } catch (XMLStreamException e) {
75 |       throw new SonarException("Unable to load descriptions of rules for Cppcheck", e);
76 |     }
77 |   }
78 | 
79 |   public static String repositoryKeyForLanguage(String language) {
80 |     return language + "-" + REPOSITORY_KEY;
81 |   }
82 | 
83 | }
84 | 


--------------------------------------------------------------------------------
/src/main/java/org/sonarqube/cppcheck/CppcheckSensor.java:
--------------------------------------------------------------------------------
  1 | /*
  2 |  * SonarQube :: Cppcheck Plugin
  3 |  * Copyright (C) 2016-2016 SonarSource SA
  4 |  * mailto:contact AT sonarsource DOT com
  5 |  *
  6 |  * This program is free software; you can redistribute it and/or
  7 |  * modify it under the terms of the GNU Lesser General Public
  8 |  * License as published by the Free Software Foundation; either
  9 |  * version 3 of the License, or (at your option) any later version.
 10 |  *
 11 |  * This program is distributed in the hope that it will be useful,
 12 |  * but WITHOUT ANY WARRANTY; without even the implied warranty of
 13 |  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 14 |  * Lesser General Public License for more details.
 15 |  *
 16 |  * You should have received a copy of the GNU Lesser General Public License
 17 |  * along with this program; if not, write to the Free Software Foundation,
 18 |  * Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
 19 |  */
 20 | package org.sonarqube.cppcheck;
 21 | 
 22 | import com.google.common.collect.Sets;
 23 | import org.slf4j.Logger;
 24 | import org.slf4j.LoggerFactory;
 25 | import org.sonar.api.batch.Sensor;
 26 | import org.sonar.api.batch.SensorContext;
 27 | import org.sonar.api.batch.fs.FileSystem;
 28 | import org.sonar.api.component.ResourcePerspectives;
 29 | import org.sonar.api.issue.Issuable;
 30 | import org.sonar.api.profiles.RulesProfile;
 31 | import org.sonar.api.resources.Project;
 32 | import org.sonar.api.resources.Resource;
 33 | import org.sonar.api.rules.Rule;
 34 | import org.sonar.api.rules.RuleFinder;
 35 | 
 36 | import java.io.File;
 37 | import java.util.Collection;
 38 | import java.util.Set;
 39 | 
 40 | public class CppcheckSensor implements Sensor {
 41 | 
 42 |   private static final Logger LOG = LoggerFactory.getLogger(CppcheckSensor.class);
 43 | 
 44 |   private final CppcheckConfiguration configuration;
 45 |   private final RulesProfile profile;
 46 |   private final RuleFinder ruleFinder;
 47 |   private final FileSystem fileSystem;
 48 |   private final ResourcePerspectives resourcePerspectives;
 49 | 
 50 |   public CppcheckSensor(CppcheckConfiguration configuration, RulesProfile profile, RuleFinder ruleFinder, FileSystem fileSystem, ResourcePerspectives resourcePerspectives) {
 51 |     this.configuration = configuration;
 52 |     this.profile = profile;
 53 |     this.ruleFinder = ruleFinder;
 54 |     this.fileSystem = fileSystem;
 55 |     this.resourcePerspectives = resourcePerspectives;
 56 |   }
 57 | 
 58 |   private boolean hasRulesEnabledFor(String key) {
 59 |     return !profile.getActiveRulesByRepository(CppcheckRuleRepository.repositoryKeyForLanguage(key)).isEmpty();
 60 |   }
 61 | 
 62 |   @Override
 63 |   public boolean shouldExecuteOnProject(Project project) {
 64 |     return (fileSystem.hasFiles(fileSystem.predicates().hasLanguages("c")) && hasRulesEnabledFor("c")) ||
 65 |       (fileSystem.hasFiles(fileSystem.predicates().hasLanguages("cpp")) && hasRulesEnabledFor("cpp"));
 66 |   }
 67 | 
 68 |   @Override
 69 |   public void analyse(Project project, SensorContext context) {
 70 |     File report = configuration.getCppcheckReportFile();
 71 |     Collection<CppcheckXmlParser.Message> messages = CppcheckXmlParser.parse(report);
 72 |     saveAll(project, context, "c", messages);
 73 |     saveAll(project, context, "cpp", messages);
 74 |   }
 75 | 
 76 |   private void saveAll(Project project, SensorContext context, String language, Collection<CppcheckXmlParser.Message> messages) {
 77 |     if (hasRulesEnabledFor(language)) {
 78 |       Set<File> indexedFiles = Sets.newHashSet(fileSystem.files(fileSystem.predicates().hasLanguage(language)));
 79 |       for (CppcheckXmlParser.Message message : messages) {
 80 |         save(project, context, language, indexedFiles, message);
 81 |       }
 82 |     }
 83 |   }
 84 | 
 85 |   private Rule getRule(String key, String id) {
 86 |     return ruleFinder.findByKey(CppcheckRuleRepository.repositoryKeyForLanguage(key), id);
 87 |   }
 88 | 
 89 |   private void save(Project project, SensorContext context, String language, Set<File> indexedFiles, CppcheckXmlParser.Message message) {
 90 |     Rule rule = getRule(language, message.getId());
 91 |     if (rule == null) {
 92 |       LOG.warn("No such rule in Sonar, so issue from Cppcheck will be ignored: {}", message.getId());
 93 |       return;
 94 |     }
 95 |     final Resource resource;
 96 |     if (message.getFilename() == null) {
 97 |       resource = project;
 98 |     } else {
 99 |       File file = new File(message.getFilename()).getAbsoluteFile();
100 |       if (!indexedFiles.contains(file)) {
101 |         return;
102 |       }
103 |       resource = org.sonar.api.resources.File.fromIOFile(file, project);
104 |       if (!context.isIndexed(resource, false)) {
105 |         LOG.warn("File not analysed by Sonar, so issue from Cppcheck will be ignored: {}", file);
106 |         return;
107 |       }
108 |     }
109 |     save(resource, rule, message);
110 |   }
111 | 
112 |   void save(Resource resource, Rule rule, CppcheckXmlParser.Message message) {
113 |     Issuable issuable = resourcePerspectives.as(Issuable.class, resource);
114 |     if (issuable == null) {
115 |       return;
116 |     }
117 |     Issuable.IssueBuilder issue = issuable.newIssueBuilder()
118 |       .ruleKey(rule.ruleKey())
119 |       .message(message.getMsg());
120 |     if (message.getLine() != null) {
121 |       int line = Integer.parseInt(message.getLine());
122 |       if (line != 0) {
123 |         issue.line(line);
124 |       }
125 |     }
126 |     issuable.addIssue(issue.build());
127 |   }
128 | 
129 |   @Override
130 |   public String toString() {
131 |     return "Cppcheck";
132 |   }
133 | 
134 | }
135 | 


--------------------------------------------------------------------------------
/src/main/java/org/sonarqube/cppcheck/CppcheckXmlParser.java:
--------------------------------------------------------------------------------
  1 | /*
  2 |  * SonarQube :: Cppcheck Plugin
  3 |  * Copyright (C) 2016-2016 SonarSource SA
  4 |  * mailto:contact AT sonarsource DOT com
  5 |  *
  6 |  * This program is free software; you can redistribute it and/or
  7 |  * modify it under the terms of the GNU Lesser General Public
  8 |  * License as published by the Free Software Foundation; either
  9 |  * version 3 of the License, or (at your option) any later version.
 10 |  *
 11 |  * This program is distributed in the hope that it will be useful,
 12 |  * but WITHOUT ANY WARRANTY; without even the implied warranty of
 13 |  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 14 |  * Lesser General Public License for more details.
 15 |  *
 16 |  * You should have received a copy of the GNU Lesser General Public License
 17 |  * along with this program; if not, write to the Free Software Foundation,
 18 |  * Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
 19 |  */
 20 | package org.sonarqube.cppcheck;
 21 | 
 22 | import com.google.common.collect.ImmutableList;
 23 | import com.google.common.io.Closeables;
 24 | import org.codehaus.staxmate.in.SMHierarchicCursor;
 25 | import org.codehaus.staxmate.in.SMInputCursor;
 26 | import org.slf4j.Logger;
 27 | import org.slf4j.LoggerFactory;
 28 | import org.sonar.api.utils.SonarException;
 29 | import org.sonar.api.utils.StaxParser;
 30 | 
 31 | import javax.annotation.Nullable;
 32 | import javax.annotation.WillClose;
 33 | import javax.xml.stream.XMLStreamException;
 34 | import java.io.File;
 35 | import java.io.InputStream;
 36 | import java.util.Collection;
 37 | 
 38 | public final class CppcheckXmlParser implements StaxParser.XmlStreamHandler {
 39 | 
 40 |   private static final Logger LOG = LoggerFactory.getLogger(CppcheckXmlParser.class);
 41 | 
 42 |   private CppcheckXmlParser() {
 43 |   }
 44 | 
 45 |   public static class Message {
 46 | 
 47 |     @Nullable
 48 |     private final String replacement;
 49 | 
 50 |     private final String id;
 51 |     private final String severity;
 52 |     private final String msg;
 53 |     private final String verbose;
 54 |     private final String filename;
 55 |     private final String line;
 56 | 
 57 |     public Message(@Nullable String replacement, String id, String severity, String msg, String verbose) {
 58 |       this.replacement = replacement;
 59 |       this.id = id;
 60 |       this.severity = severity;
 61 |       this.msg = msg;
 62 |       this.verbose = verbose;
 63 |       this.filename = null;
 64 |       this.line = null;
 65 |     }
 66 | 
 67 |     public Message(String id, String severity, String msg, String verbose, @Nullable String filename, @Nullable String line) {
 68 |       this.replacement = null;
 69 |       this.id = id;
 70 |       this.severity = severity;
 71 |       this.msg = msg;
 72 |       this.verbose = verbose;
 73 |       this.filename = filename;
 74 |       this.line = line;
 75 |     }
 76 | 
 77 |     @Nullable
 78 |     public String getReplacement() {
 79 |       return replacement;
 80 |     }
 81 | 
 82 |     public String getId() {
 83 |       return id;
 84 |     }
 85 | 
 86 |     public String getSeverity() {
 87 |       return severity;
 88 |     }
 89 | 
 90 |     public String getMsg() {
 91 |       return msg;
 92 |     }
 93 | 
 94 |     public String getVerbose() {
 95 |       return verbose;
 96 |     }
 97 | 
 98 |     @Nullable
 99 |     public String getFilename() {
100 |       return filename;
101 |     }
102 | 
103 |     @Nullable
104 |     public String getLine() {
105 |       return line;
106 |     }
107 | 
108 |   }
109 | 
110 |   public static Collection<Message> parse(@WillClose InputStream is) throws XMLStreamException {
111 |     CppcheckXmlParser handler = new CppcheckXmlParser();
112 |     try {
113 |       new StaxParser(handler).parse(is);
114 |     } finally {
115 |       Closeables.closeQuietly(is);
116 |     }
117 |     return handler.result.build();
118 |   }
119 | 
120 |   public static Collection<Message> parse(File file) {
121 |     CppcheckXmlParser handler = new CppcheckXmlParser();
122 |     try {
123 |       new StaxParser(handler).parse(file);
124 |     } catch (XMLStreamException e) {
125 |       throw new SonarException("Unable to parse file: " + file, e);
126 |     }
127 |     return handler.result.build();
128 |   }
129 | 
130 |   private final ImmutableList.Builder<Message> result = ImmutableList.builder();
131 | 
132 |   @Override
133 |   public void stream(SMHierarchicCursor rootCursor) throws XMLStreamException {
134 |     rootCursor.advance();
135 |     SMInputCursor cppcheckCursor = rootCursor.childElementCursor();
136 |     while (cppcheckCursor.getNext() != null) {
137 |       String localName = cppcheckCursor.getLocalName();
138 |       if ("cppcheck".equals(localName)) {
139 |         String version = cppcheckCursor.getAttrValue("version");
140 |         if (version != null) {
141 |           LOG.info("Cppcheck version: " + version);
142 |         }
143 |       } else if ("errors".equals(localName)) {
144 |         loopOnErrors(cppcheckCursor.childElementCursor("error"));
145 |       } else {
146 |         throw new IllegalStateException("Unexpected cppcheck file format, unexpected xml element: " + localName);
147 |       }
148 |     }
149 | 
150 |     loopOnErrors(cppcheckCursor);
151 |   }
152 | 
153 |   private void loopOnErrors(SMInputCursor error) throws XMLStreamException {
154 |     while (error.getNext() != null) {
155 |       String id = error.getAttrValue("id");
156 |       String severity = error.getAttrValue("severity");
157 |       String msg = error.getAttrValue("msg");
158 |       String verbose = error.getAttrValue("verbose");
159 | 
160 |       String replacement = error.getAttrValue("SonarQube");
161 | 
162 |       SMInputCursor location = error.childElementCursor("location");
163 |       if (location.getNext() != null) {
164 |         String filename = location.getAttrValue("file");
165 |         String line = location.getAttrValue("line");
166 |         result.add(new Message(id, severity, msg, verbose, filename, line));
167 |       } else {
168 |         result.add(new Message(replacement, id, severity, msg, verbose));
169 |       }
170 |     }
171 |   }
172 | 
173 | }
174 | 


--------------------------------------------------------------------------------
/src/main/java/org/sonarqube/cppcheck/package-info.java:
--------------------------------------------------------------------------------
 1 | /*
 2 |  * SonarQube :: Cppcheck Plugin
 3 |  * Copyright (C) 2016-2016 SonarSource SA
 4 |  * mailto:contact AT sonarsource DOT com
 5 |  *
 6 |  * This program is free software; you can redistribute it and/or
 7 |  * modify it under the terms of the GNU Lesser General Public
 8 |  * License as published by the Free Software Foundation; either
 9 |  * version 3 of the License, or (at your option) any later version.
10 |  *
11 |  * This program is distributed in the hope that it will be useful,
12 |  * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 |  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
14 |  * Lesser General Public License for more details.
15 |  *
16 |  * You should have received a copy of the GNU Lesser General Public License
17 |  * along with this program; if not, write to the Free Software Foundation,
18 |  * Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
19 |  */
20 | @javax.annotation.ParametersAreNonnullByDefault
21 | package org.sonarqube.cppcheck;
22 | 


--------------------------------------------------------------------------------
/src/test/java/org/sonarqube/cppcheck/CppcheckConfigurationTest.java:
--------------------------------------------------------------------------------
 1 | /*
 2 |  * SonarQube :: Cppcheck Plugin
 3 |  * Copyright (C) 2016-2016 SonarSource SA
 4 |  * mailto:contact AT sonarsource DOT com
 5 |  *
 6 |  * This program is free software; you can redistribute it and/or
 7 |  * modify it under the terms of the GNU Lesser General Public
 8 |  * License as published by the Free Software Foundation; either
 9 |  * version 3 of the License, or (at your option) any later version.
10 |  *
11 |  * This program is distributed in the hope that it will be useful,
12 |  * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 |  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
14 |  * Lesser General Public License for more details.
15 |  *
16 |  * You should have received a copy of the GNU Lesser General Public License
17 |  * along with this program; if not, write to the Free Software Foundation,
18 |  * Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
19 |  */
20 | package org.sonarqube.cppcheck;
21 | 
22 | import org.junit.Before;
23 | import org.junit.Rule;
24 | import org.junit.Test;
25 | import org.junit.rules.ExpectedException;
26 | import org.sonar.api.config.Settings;
27 | import org.sonar.api.utils.SonarException;
28 | 
29 | import java.io.File;
30 | 
31 | import static org.fest.assertions.Assertions.assertThat;
32 | 
33 | public class CppcheckConfigurationTest {
34 | 
35 |   @Rule
36 |   public ExpectedException thrown = ExpectedException.none();
37 | 
38 |   private Settings settings;
39 |   private CppcheckConfiguration configuration;
40 | 
41 |   @Before
42 |   public void setUp() {
43 |     settings = new Settings();
44 |     configuration = new CppcheckConfiguration(settings);
45 |   }
46 | 
47 |   @Test
48 |   public void should_check_for_missing_property() {
49 |     thrown.expect(SonarException.class);
50 |     thrown.expectMessage("Cppcheck report property found empty, you should run cppcheck externally and import its report using sonar.cppcheck.reportPath property, for more information see the plugin documentation.");
51 |     configuration.getCppcheckReportFile();
52 |   }
53 | 
54 |   @Test
55 |   public void should_check_correctness_of_path_to_cppcheck_report() {
56 |     String reportPath = "not-existing";
57 |     settings.setProperty(CppcheckConfiguration.CPPCHECK_REPORT_PATH_PROPERTY, reportPath);
58 |     thrown.expect(SonarException.class);
59 |     thrown.expectMessage("Cppcheck report is not found, please check property 'sonar.cppcheck.reportPath': not-existing");
60 |     configuration.getCppcheckReportFile();
61 |   }
62 | 
63 |   @Test
64 |   public void should_return_path_to_cppcheck_report() {
65 |     String reportPath = "src/test/resources/cppcheck2.xml";
66 |     settings.setProperty(CppcheckConfiguration.CPPCHECK_REPORT_PATH_PROPERTY, reportPath);
67 |     assertThat(configuration.getCppcheckReportFile()).isEqualTo(new File(reportPath));
68 |   }
69 | 
70 | }
71 | 


--------------------------------------------------------------------------------
/src/test/java/org/sonarqube/cppcheck/CppcheckPluginTest.java:
--------------------------------------------------------------------------------
 1 | /*
 2 |  * SonarQube :: Cppcheck Plugin
 3 |  * Copyright (C) 2016-2016 SonarSource SA
 4 |  * mailto:contact AT sonarsource DOT com
 5 |  *
 6 |  * This program is free software; you can redistribute it and/or
 7 |  * modify it under the terms of the GNU Lesser General Public
 8 |  * License as published by the Free Software Foundation; either
 9 |  * version 3 of the License, or (at your option) any later version.
10 |  *
11 |  * This program is distributed in the hope that it will be useful,
12 |  * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 |  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
14 |  * Lesser General Public License for more details.
15 |  *
16 |  * You should have received a copy of the GNU Lesser General Public License
17 |  * along with this program; if not, write to the Free Software Foundation,
18 |  * Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
19 |  */
20 | package org.sonarqube.cppcheck;
21 | 
22 | import org.junit.Test;
23 | 
24 | import static org.fest.assertions.Assertions.assertThat;
25 | 
26 | public class CppcheckPluginTest {
27 |   @Test
28 |   public void testExtensions() throws Exception {
29 |     CppcheckPlugin cppcheckPlugin = new CppcheckPlugin();
30 |     assertThat(cppcheckPlugin.getExtensions()).hasSize(5);
31 |   }
32 | }
33 | 


--------------------------------------------------------------------------------
/src/test/java/org/sonarqube/cppcheck/CppcheckRuleRepositoryTest.java:
--------------------------------------------------------------------------------
  1 | /*
  2 |  * SonarQube :: Cppcheck Plugin
  3 |  * Copyright (C) 2016-2016 SonarSource SA
  4 |  * mailto:contact AT sonarsource DOT com
  5 |  *
  6 |  * This program is free software; you can redistribute it and/or
  7 |  * modify it under the terms of the GNU Lesser General Public
  8 |  * License as published by the Free Software Foundation; either
  9 |  * version 3 of the License, or (at your option) any later version.
 10 |  *
 11 |  * This program is distributed in the hope that it will be useful,
 12 |  * but WITHOUT ANY WARRANTY; without even the implied warranty of
 13 |  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 14 |  * Lesser General Public License for more details.
 15 |  *
 16 |  * You should have received a copy of the GNU Lesser General Public License
 17 |  * along with this program; if not, write to the Free Software Foundation,
 18 |  * Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
 19 |  */
 20 | package org.sonarqube.cppcheck;
 21 | 
 22 | import com.google.common.annotations.VisibleForTesting;
 23 | import com.google.common.base.Throwables;
 24 | import com.google.common.collect.Lists;
 25 | import com.google.common.collect.Maps;
 26 | import com.google.common.io.Closeables;
 27 | import org.apache.commons.io.FileUtils;
 28 | import org.apache.commons.lang.StringEscapeUtils;
 29 | import org.apache.commons.lang.StringUtils;
 30 | import org.custommonkey.xmlunit.Diff;
 31 | import org.custommonkey.xmlunit.XMLUnit;
 32 | import org.junit.Test;
 33 | import org.sonar.api.rules.Rule;
 34 | import org.sonar.api.rules.RulePriority;
 35 | 
 36 | import java.io.File;
 37 | import java.io.FileReader;
 38 | import java.io.FileWriter;
 39 | import java.io.IOException;
 40 | import java.io.PrintWriter;
 41 | import java.util.Collection;
 42 | import java.util.Collections;
 43 | import java.util.List;
 44 | import java.util.Map;
 45 | import java.util.Properties;
 46 | import java.util.TreeMap;
 47 | 
 48 | import static org.fest.assertions.Assertions.assertThat;
 49 | 
 50 | public class CppcheckRuleRepositoryTest {
 51 | 
 52 |   @Test
 53 |   public void test() throws Exception {
 54 |     CppcheckRuleRepository repository = new CppcheckRuleRepository("cpp");
 55 |     List<Rule> rules = repository.createRules();
 56 |     assertThat(rules).onProperty("name").excludes(null, "");
 57 |     assertThat(rules).onProperty("description").excludes(null, "");
 58 |     assertThat(rules).onProperty("severity").containsOnly(RulePriority.MAJOR);
 59 | 
 60 |     int numberOfDeprecated = 0;
 61 |     for (Rule rule : rules) {
 62 |       if (Rule.STATUS_DEPRECATED.equals(rule.getStatus())) {
 63 |         numberOfDeprecated++;
 64 |       }
 65 |     }
 66 | 
 67 |     assertThat(rules.size()).as("total").isEqualTo(350);
 68 |     System.out.println("Number of deprecated rules: " + numberOfDeprecated);
 69 |     assertThat(numberOfDeprecated).as("deprecated").isGreaterThan(90);
 70 |   }
 71 | 
 72 |   @Test
 73 |   public void update() throws Exception {
 74 |     generate();
 75 |     Diff diff = XMLUnit.compareXML(
 76 |       new FileReader(new File("target/generated-cppcheck.xml")),
 77 |       new FileReader(new File("src/main/resources/org/sonarqube/cppcheck.xml"))
 78 |     );
 79 |     assertThat(diff.identical()).as("Generated cppcheck.xml identical to currently used").isTrue();
 80 |   }
 81 | 
 82 |   public static void generate() throws Exception {
 83 |     PrintWriter writer = new PrintWriter(new FileWriter("target/generated-cppcheck.xml"));
 84 |     TreeMap<String, RuleDescription> map = Maps.newTreeMap();
 85 |     String prevVersion = "";
 86 |     for (String version : listVersions()) {
 87 |       for (CppcheckXmlParser.Message msg : CppcheckXmlParser.parse(new File("src/main/files/cppcheck-" + version + ".xml"))) {
 88 |         RuleDescription ruleDescription = map.get(msg.getId());
 89 |         if (ruleDescription == null) {
 90 |           // new rule
 91 |           ruleDescription = new RuleDescription();
 92 |           map.put(msg.getId(), ruleDescription);
 93 |           ruleDescription.minVersion = version;
 94 |         } else {
 95 |           // existing rule
 96 |           if (!prevVersion.equals(ruleDescription.maxVersion)) {
 97 |             System.err.println("Merge of rule, which appear and disappear from version to version: " + msg.getId());
 98 |           }
 99 |         }
100 |         ruleDescription.maxVersion = version;
101 |         // Supposed that message from newer version is better
102 |         ruleDescription.msg = msg;
103 |       }
104 |       prevVersion = version;
105 |     }
106 | 
107 |     Properties replacements = loadReplacements();
108 | 
109 |     writer.println("<results version=\"2\">");
110 |     writer.println("<errors>");
111 |     for (Map.Entry<String, RuleDescription> entry : map.entrySet()) {
112 |       RuleDescription description = entry.getValue();
113 |       final String versions;
114 |       if (description.maxVersion.equals(prevVersion)) {
115 |         versions = " (since Cppcheck " + description.minVersion + ")";
116 |       } else if (description.minVersion.equals(description.maxVersion)) {
117 |         versions = " (Cppcheck " + description.minVersion + ")";
118 |       } else {
119 |         versions = " (Cppcheck " + description.minVersion + "-" + description.maxVersion + ")";
120 |       }
121 |       writer.append("<error ");
122 |       if (replacements.containsKey(entry.getKey())) {
123 |         writer.append("SonarQube=\"").append(replacements.getProperty(entry.getKey())).append("\"\n    ");
124 |       }
125 |       writer.append("id=\"").append(entry.getKey())
126 |         .append("\" msg=\"").append(StringEscapeUtils.escapeXml(description.msg.getMsg() + versions))
127 |         .append("\" verbose=\"").append(StringEscapeUtils.escapeXml(description.msg.getVerbose()))
128 |         .append("\" />")
129 |         .println();
130 |     }
131 |     writer.println("</errors>");
132 |     writer.println("</results>");
133 |     writer.close();
134 |   }
135 | 
136 |   private static List<String> listVersions() {
137 |     Collection<File> files = FileUtils.listFiles(new File("src/main/files"), new String[]{"xml"}, false);
138 |     List<String> names = Lists.newArrayList();
139 |     for (File file : files) {
140 |       names.add(StringUtils.substringBetween(file.getName(), "cppcheck-", ".xml"));
141 |     }
142 |     Collections.sort(names);
143 |     return names;
144 |   }
145 | 
146 |   private static class RuleDescription {
147 |     String minVersion, maxVersion;
148 |     CppcheckXmlParser.Message msg;
149 |   }
150 | 
151 |   @VisibleForTesting
152 |   static Properties loadReplacements() {
153 |     Properties properties = new Properties();
154 |     FileReader reader = null;
155 |     try {
156 |       reader = new FileReader("src/main/files/cppcheck_replacements.properties");
157 |       properties.load(reader);
158 |     } catch (IOException e) {
159 |       throw Throwables.propagate(e);
160 |     } finally {
161 |       Closeables.closeQuietly(reader);
162 |     }
163 |     return properties;
164 |   }
165 | 
166 | }
167 | 


--------------------------------------------------------------------------------
/src/test/java/org/sonarqube/cppcheck/CppcheckSensorTest.java:
--------------------------------------------------------------------------------
  1 | /*
  2 |  * SonarQube :: Cppcheck Plugin
  3 |  * Copyright (C) 2016-2016 SonarSource SA
  4 |  * mailto:contact AT sonarsource DOT com
  5 |  *
  6 |  * This program is free software; you can redistribute it and/or
  7 |  * modify it under the terms of the GNU Lesser General Public
  8 |  * License as published by the Free Software Foundation; either
  9 |  * version 3 of the License, or (at your option) any later version.
 10 |  *
 11 |  * This program is distributed in the hope that it will be useful,
 12 |  * but WITHOUT ANY WARRANTY; without even the implied warranty of
 13 |  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 14 |  * Lesser General Public License for more details.
 15 |  *
 16 |  * You should have received a copy of the GNU Lesser General Public License
 17 |  * along with this program; if not, write to the Free Software Foundation,
 18 |  * Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
 19 |  */
 20 | package org.sonarqube.cppcheck;
 21 | 
 22 | import com.google.common.collect.ImmutableList;
 23 | import org.junit.Before;
 24 | import org.junit.Test;
 25 | import org.junit.rules.ExpectedException;
 26 | import org.mockito.Mockito;
 27 | import org.sonar.api.batch.SensorContext;
 28 | import org.sonar.api.batch.fs.FilePredicate;
 29 | import org.sonar.api.batch.fs.internal.DefaultFileSystem;
 30 | import org.sonar.api.profiles.RulesProfile;
 31 | import org.sonar.api.resources.Project;
 32 | import org.sonar.api.resources.Resource;
 33 | import org.sonar.api.rules.ActiveRule;
 34 | import org.sonar.api.rules.Rule;
 35 | import org.sonar.api.rules.RuleFinder;
 36 | 
 37 | import java.io.File;
 38 | import java.util.Collections;
 39 | 
 40 | import static org.fest.assertions.Assertions.assertThat;
 41 | import static org.mockito.Matchers.any;
 42 | import static org.mockito.Matchers.anyString;
 43 | import static org.mockito.Mockito.mock;
 44 | import static org.mockito.Mockito.spy;
 45 | import static org.mockito.Mockito.times;
 46 | import static org.mockito.Mockito.verify;
 47 | import static org.mockito.Mockito.when;
 48 | 
 49 | public class CppcheckSensorTest {
 50 | 
 51 |   private RuleFinder ruleFinder;
 52 |   private RulesProfile profile;
 53 |   private CppcheckConfiguration configuration;
 54 |   private CppcheckSensor sensor;
 55 |   private DefaultFileSystem fileSystem;
 56 | 
 57 |   @org.junit.Rule
 58 |   public ExpectedException thrown = ExpectedException.none();
 59 | 
 60 |   @Before
 61 |   public void setUp() {
 62 |     ruleFinder = mock(RuleFinder.class);
 63 |     profile = mock(RulesProfile.class);
 64 |     configuration = mock(CppcheckConfiguration.class);
 65 |     fileSystem = spy(new DefaultFileSystem(new File("src/test/resources/cppcheck")));
 66 | 
 67 |     sensor = spy(new CppcheckSensor(configuration, profile, ruleFinder, fileSystem, null));
 68 |     Mockito.doNothing().when(sensor).save(any(Resource.class), Mockito.any(Rule.class), any(CppcheckXmlParser.Message.class));
 69 |   }
 70 | 
 71 |   @Test
 72 |   public void shouldExecuteOnProject() {
 73 |     Project project = mock(Project.class);
 74 |     assertThat(sensor.shouldExecuteOnProject(project)).isFalse();
 75 | 
 76 |     when(profile.getActiveRulesByRepository("cpp-cppcheck"))
 77 |       .thenReturn(Collections.singletonList(mock(ActiveRule.class)));
 78 |     when(fileSystem.hasFiles(any(FilePredicate.class))).thenReturn(false);
 79 |     assertThat(sensor.shouldExecuteOnProject(project)).isFalse();
 80 | 
 81 |     when(fileSystem.hasFiles(any(FilePredicate.class))).thenReturn(true);
 82 |     assertThat(sensor.shouldExecuteOnProject(project)).isTrue();
 83 | 
 84 |     // no active rules:
 85 |     when(profile.getActiveRulesByRepository("cpp-cppcheck"))
 86 |         .thenReturn(Collections.<ActiveRule>emptyList());
 87 |     assertThat(sensor.shouldExecuteOnProject(project)).isFalse();
 88 |   }
 89 | 
 90 |   @Test
 91 |   public void should_parse() {
 92 |     when(ruleFinder.findByKey(anyString(), anyString()))
 93 |       .thenReturn(null)
 94 |       .thenReturn(Rule.create());
 95 | 
 96 |     Project project = mock(Project.class);
 97 | 
 98 |     SensorContext context = mock(SensorContext.class);
 99 |     when(context.isIndexed(Mockito.eq((Resource) null), Mockito.eq(false)))
100 |       .thenReturn(false)
101 |       .thenReturn(true);
102 | 
103 |     when(profile.getActiveRulesByRepository(anyString())).thenReturn(ImmutableList.of(mock(ActiveRule.class)));
104 | 
105 |     when(configuration.getCppcheckReportFile()).thenReturn(new File("src/test/resources/cppcheck2.xml"));
106 |     sensor.analyse(project, context);
107 | 
108 |     verify(sensor, times(2)).save(any(Resource.class), Mockito.any(Rule.class), any(CppcheckXmlParser.Message.class));
109 |   }
110 | 
111 |   @Test
112 |   public void test_toString() {
113 |     assertThat(sensor.toString()).isEqualTo("Cppcheck");
114 |   }
115 | 
116 | }
117 | 


--------------------------------------------------------------------------------
/src/test/java/org/sonarqube/cppcheck/CppcheckXmlParserTest.java:
--------------------------------------------------------------------------------
 1 | /*
 2 |  * SonarQube :: Cppcheck Plugin
 3 |  * Copyright (C) 2016-2016 SonarSource SA
 4 |  * mailto:contact AT sonarsource DOT com
 5 |  *
 6 |  * This program is free software; you can redistribute it and/or
 7 |  * modify it under the terms of the GNU Lesser General Public
 8 |  * License as published by the Free Software Foundation; either
 9 |  * version 3 of the License, or (at your option) any later version.
10 |  *
11 |  * This program is distributed in the hope that it will be useful,
12 |  * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 |  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
14 |  * Lesser General Public License for more details.
15 |  *
16 |  * You should have received a copy of the GNU Lesser General Public License
17 |  * along with this program; if not, write to the Free Software Foundation,
18 |  * Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
19 |  */
20 | package org.sonarqube.cppcheck;
21 | 
22 | import com.google.common.collect.Iterables;
23 | import org.apache.commons.io.FileUtils;
24 | import org.junit.Rule;
25 | import org.junit.Test;
26 | import org.junit.rules.ExpectedException;
27 | import org.sonar.api.utils.SonarException;
28 | 
29 | import java.io.File;
30 | import java.util.Collection;
31 | 
32 | import static org.fest.assertions.Assertions.assertThat;
33 | 
34 | public class CppcheckXmlParserTest {
35 | 
36 |   @Rule
37 |   public ExpectedException thrown = ExpectedException.none();
38 | 
39 |   @Test
40 |   public void test2() {
41 |     File file = FileUtils.toFile(getClass().getResource("/cppcheck2.xml"));
42 | 
43 |     Collection<CppcheckXmlParser.Message> messages = CppcheckXmlParser.parse(file);
44 |     assertThat(messages.size()).isEqualTo(9);
45 | 
46 |     CppcheckXmlParser.Message message = messages.iterator().next();
47 |     assertThat(message.getId()).isEqualTo("autoVariables");
48 |     assertThat(message.getMsg()).isEqualTo("Assigning address of local auto-variable to a function parameter.");
49 |     assertThat(message.getVerbose()).startsWith("Dangerous assignment");
50 |     assertThat(message.getSeverity()).isEqualTo("error");
51 |     assertThat(message.getLine()).isEqualTo("4");
52 |     assertThat(message.getFilename()).isEqualTo("src/autoVariables/bad.c");
53 |   }
54 | 
55 |   @Test
56 |   public void test3() {
57 |     File file = FileUtils.toFile(getClass().getResource("/no-location.xml"));
58 |     Collection<CppcheckXmlParser.Message> messages = CppcheckXmlParser.parse(file);
59 |     CppcheckXmlParser.Message message = Iterables.getOnlyElement(messages);
60 |     assertThat(message.getMsg()).isNotNull();
61 |     assertThat(message.getLine()).isNull();
62 |     assertThat(message.getFilename()).isNull();
63 |   }
64 | 
65 |   @Test
66 |   public void should_throw_exception() throws Exception {
67 |     thrown.expect(SonarException.class);
68 |     thrown.expectMessage("Unable to parse file: notfound.xml");
69 |     CppcheckXmlParser.parse(new File("notfound.xml"));
70 |   }
71 | 
72 | }
73 | 


--------------------------------------------------------------------------------
/src/test/resources/cppcheck2.xml:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <results version="2">
 3 |   <cppcheck version="1.53"/>
 4 |   <errors>
 5 |   <error id="autoVariables" severity="error" msg="Assigning address of local auto-variable to a function parameter." verbose="Dangerous assignment - function parameter takes the address of a local auto-variable. Local auto-variables are reserved from the stack. And the stack is freed when the function ends. So the pointer to a local variable is invalid after the function ends.">
 6 |     <location file="src/autoVariables/bad.c" line="4"/>
 7 |   </error>
 8 |   <error id="missingInclude" severity="information" msg="Cppcheck cannot find all the include files (use --check-config for details)" verbose="Cppcheck cannot find all the include files. Cpppcheck can check the code without the include files found. But the results will probably be more accurate if all the include files are found. Please check your project's include directories and add all of them as include directories for Cppcheck. To see what files Cppcheck cannot find use --check-config.">
 9 |   </error>
10 |   <error id="arrayIndexOutOfBounds" severity="error" msg="Array 'a[2]' index 2 out of bounds" verbose="Array 'a[2]' index 2 out of bounds">
11 |     <location file="src/arrayIndexOutOfBounds/bad.c" line="6"/>
12 |   </error>
13 |   <error id="bufferAccessOutOfBounds" severity="error" msg="Buffer access out-of-bounds: a" verbose="Buffer access out-of-bounds: a">
14 |     <location file="src/bufferAccessOutOfBounds/bad.c" line="6"/>
15 |   </error>
16 |   <error id="erase" severity="error" msg="Dangerous iterator usage after erase()-method." verbose="The iterator is invalid after it has been used in erase() function. Dereferencing or comparing it with another iterator is invalid operation.">
17 |     <location file="src/erase/bad.cpp" line="11"/>
18 |   </error>
19 |   <error id="memleak" severity="error" msg="Memory leak: a" verbose="Memory leak: a">
20 |     <location file="src/memleak/bad.c" line="8"/>
21 |   </error>
22 |   <error id="outOfBounds" severity="error" msg="snprintf size is out of bounds: Supplied size 10 is larger than actual size of 5" verbose="snprintf size is out of bounds: Supplied size 10 is larger than actual size of 5">
23 |     <location file="src/outOfBounds/bad.c" line="5"/>
24 |   </error>
25 |   <error id="resourceLeak" severity="error" msg="Resource leak: a" verbose="Resource leak: a">
26 |     <location file="src/resourceLeak/bad.c" line="8"/>
27 |   </error>
28 |   <error id="syntaxError" severity="error" msg="Invalid number of character ({) when these macros are defined: 'A'." verbose="Invalid number of character ({) when these macros are defined: 'A'.">
29 |     <location file="src/syntaxError/bad.c" line="2"/>
30 |   </error>
31 |   </errors>
32 | </results>
33 | 


--------------------------------------------------------------------------------
/src/test/resources/no-location.xml:
--------------------------------------------------------------------------------
1 | <?xml version="1.0" encoding="UTF-8"?>
2 | <results version="2">
3 |   <cppcheck version="1.51"/>
4 |   <errors>
5 |   <error id="missingInclude" severity="information" msg="Cppcheck cannot find all the include files (use --check-config for details)" verbose="Cppcheck cannot find all the include files. Cpppcheck can check the code without the include files found. But the results will probably be more accurate if all the include files are found. Please check your project's include directories and add all of them as include directories for Cppcheck. To see what files Cppcheck cannot find use --check-config.">
6 |   </error>
7 |   </errors>
8 | </results>
9 | 


--------------------------------------------------------------------------------