b1e92fc399
* Fix misra 8.7 false positives on single function usage When there is a single usage of a function, we should first check if the file it is used in, is the same one it was defined in. When this is not the case, there is no violatior to be reported. * Fix misra rule 5.9 false positives for exception The exception for rule 5.9 described in the guidelines allows for multiple definitions of internal linkage obejcts when these regard a static inlined function defined in the same header file. * Fix neglecting of inline keyword flag upon simplifications When the inline keyword is being "simplified" and the inline flag is degated to the next token. However, this information might be lost if the next token itself is simplified/deleted in a futher pass. Therefore, we must propagated the flag to all the next named tokens, so we can make sure the function name token itself is tagged with this property. * add tests for misra addon rules 8.7 and 5.9 |
||
|---|---|---|
| .. | ||
| doc | ||
| test | ||
| README.md | ||
| ROS_naming.json | ||
| __init__.py | ||
| cert.py | ||
| cppcheck.py | ||
| cppcheckdata.doxyfile | ||
| cppcheckdata.py | ||
| findcasts.py | ||
| misc.py | ||
| misra.py | ||
| misra_9.py | ||
| naming.json | ||
| naming.py | ||
| namingng.py | ||
| runaddon.py | ||
| threadsafety.py | ||
| y2038.py | ||
README.md
Cppcheck addons
Addons are scripts that analyses Cppcheck dump files to check compatibility with secure coding standards and to locate various issues.
Supported addons
- cert.py Checks for compliance with the safe programming standard CERT.
- misra.py
Used to verify compliance with MISRA C 2012 - a proprietary set of guidelines to avoid such questionable code, developed for embedded systems. Since this standard is proprietary, cppcheck does not display error text by specifying only the number of violated rules (for example, [c2012-21.3]). If you want to display full texts for violated rules, you will need to create a text file containing MISRA rules, which you will have to pass when calling the script with
--rule-textskey. Some examples of rule texts files available in tests directory. - y2038.py Checks Linux system for year 2038 problem safety. This required modified environment. See complete description here.
- threadsafety.py Analyse Cppcheck dump files to locate threadsafety issues like static local objects used by multiple threads.
Usage
Command line interface
cppcheck --addon=cert --addon=y2038 src/test.c
It is also possible to call scripts as follows:
cppcheck --dump --quiet src/test.c
python cert.py src/test.c.dump
python misra.py --rule-texts=~/misra_rules.txt src/test.c.dump
This allows you to add additional parameters when calling the script (for example, --rule-texts for misra.py). The full list of available parameters can be found by calling any script with the --help flag.
GUI
When using the graphical interface cppcheck-gui, the selection and configuration of addons is carried out on the tab Addons and tools in the project settings (Edit Project File):
