Checker | Guideline |
|---|
| -q & Name Check | MSC34-CPP. Do not modify the standard namespace |
| -wc "::FILE::@constructor" | FIO38-CPP. Do not use a copy of a FILE object for input and output |
| -wc "::std::vector::[]" | STR39-CPP. Range check element access |
| -wc rand | MSC30-CPP. Do not use the rand() function for generating pseudorandom numbers |
| -wc strtok | STR06-CPP. Do not assume that strtok() leaves the parse string unchanged |
| 0064 | PRE30-CPP. Do not create a universal character name through concatenation |
| 0103, 0105, 0106, 0293,254 | DCL36-CPP. Do not declare an identifier with conflicting linkage classifications |
| 0424 | EXP38-CPP. Do not modify constant values |
| 0600,0601,1038,1039 | PRE05-CPP. Understand macro replacement when concatenating tokens or performing stringification |
| 1000,1001 | PRE06-CPP. Enclose header files in an inclusion guard |
| 1020,1021, 1025, 1026 | PRE00-CPP. Avoid defining macros |
| 1023 | PRE10-CPP. Wrap multistatement macros in a do-while loop |
| 1025,1026 | DCL00-CPP. Const-qualify immutable objects |
| 1030 | PRE01-CPP. Use parentheses within macros around parameter names |
| 1031 | PRE02-CPP. Macro replacement lists should be parenthesized |
| 1038,1039,1100,2075, | MSC14-CPP. Do not introduce unnecessary platform dependencies |
| 1067 | MSC33-CPP. Obey the One Definition Rule |
| 1092 | PRE07-CPP. Avoid using repeated question marks |
| 1095 | MSC09-CPP. Character encoding: Use subset of ASCII for safety |
| 14 | DCL33-CPP. Never qualify a reference type with const or volatile |
| 145, 2845, 2846, 2847, | STR31-CPP. Guarantee that storage for character arrays has sufficient space for character data and the null terminator |
| 150 | STR04-CPP. Use plain char for characters in the basic character set |
| 1500,1502,2980,2981, | MSC13-CPP. Detect and remove unused values |
| 1501,1503,2880,2881, | MSC07-CPP. Detect and remove dead code |
| 1504, 1505, 1514, 1531, 1532, 1533, 2300, 2313, 2314 | DCL15-CPP. Declare file-scope objects or functions that do not need external linkage in an unnamed namespace |
| 1504,1505,1531,1533,4113, 4114 | DCL07-CPP. Minimize the scope of variables and methods |
| 1509 | MSC33-CPP. Obey the One Definition Rule |
| 1515, 1516, 1517 | PRE08-CPP. Guarantee that header file names are unique |
| 1520,1521 | MEM05-CPP. Avoid large stack allocations |
| 1554, 1555, 1556, 1557, 1558, | DCL14-CPP. Avoid assumptions about the initialization order between translation units |
| 1559 | DCL14-CPP. Avoid assumptions about the initialization order between translation units |
| 1710 - but needs -po options | DCL02-CPP. Use visually distinct identifiers |
| 2001 | MEM13-CPP. Use smart pointers instead of raw pointers for resource management |
| 2009 | DCL17-CPP. Declare function parameters that are large data structures and are not changed by the function as const references |
| 2010 | DCL17-CPP. Declare function parameters that are large data structures and are not changed by the function as const references |
| 2012 | DCL31-CPP. Do not define variadic functions |
| 2019 | OOP04-CPP. Prefer not to give virtual functions default argument initializers |
| 2070,2071,2072,2073,2074, | DCL11-CPP. Preserve operator semantics when overloading operators |
| 2076,2085,2114,2125, | MSC14-CPP. Do not introduce unnecessary platform dependencies |
| 2077,2078, | DCL10-CPP. Do not overload the ampersand, comma, logical AND or logical OR operators |
| 2079,2092 | DCL10-CPP. Do not overload the ampersand, comma, logical AND or logical OR operators |
| 2081,2082, 2090, 2097 | DCL11-CPP. Preserve operator semantics when overloading operators |
| 2100,2101 | OOP00-CPP. Declare data members private |
| 2110,2111,2112,2113, | MEM41-CPP. Declare a copy constructor, a copy assignment operator, and a destructor in a class that manages resources |
| 2110,2112,2113 | OOP06-CPP. Create a private copy constructor and assignment operator for non copyable objects |
| 2116 | OOP34-CPP. Ensure the proper destructor is called for polymorphic objects |
| 2118.4262.4263.4264 | MEM41-CPP. Declare a copy constructor, a copy assignment operator, and a destructor in a class that manages resources |
| 2120 | OOP03-CPP. Prefer not to overload virtual functions |
| 2121 | OOP02-CPP. Do not hide inherited non-virtual member functions |
| 2139,2178,2200,2201, | MSC14-CPP. Do not introduce unnecessary platform dependencies |
| 2159 | OOP07-CPP. Do not inherit from multiple classes that have distinct objects with the same name |
| 2160,2161 | DCL35-CPP. Do not overload operator new in a different scope than operator delete |
| 2180 | OOP32-CPP. Ensure that single-argument constructors are marked "explicit" |
| 2181 | OOP01-CPP. Be careful with the definition of conversion operators |
| 2202,2413,2640,3017, | MSC14-CPP. Do not introduce unnecessary platform dependencies |
| 2304,2306,2307,2308,2309 | INT12-CPP. Do not make assumptions about the type of a plain int bit-field when used in an expression |
| 2310, 1550, 1551, 1552, 1553, | DCL14-CPP. Avoid assumptions about the initialization order between translation units |
| 2410,2411 | ARR00-CPP. Understand when to prefer vectors over arrays |
| 2422,2423 | INT09-CPP. Ensure enumeration constants map to unique values |
| 2426 | DCL05-CPP. Use typedefs to improve code readability |
| 2427,2428 | PRE03-CPP. Prefer typedefs to defines for encoding types |
| 2500,2501,2502,2503,2504,2505 | DCL01-CPP. Do not reuse variable names in subscopes |
| 2502 | DCL18-CPP. In a class template, qualify any name that may be found in a dependent base class template |
| 2510 | OOP31-CPP. Ensure object construction invocations isn't mistaken for a function variable declaration |
| 2515, 2516, 2527, 2528, 4028, 4624, 4629 | DCL30-CPP. Declare objects with appropriate storage durations |
| 2624 | OOP04-CPP. Prefer not to give virtual functions default argument initializers |
| 2625 | DCL31-CPP. Do not define variadic functions |
| 2761,2762,2763,2766, | ARR36-CPP. Do not subtract or compare two pointers or iterators that do not refer to the same array or container |
| 2767,2768,2771,2772, | ARR36-CPP. Do not subtract or compare two pointers or iterators that do not refer to the same array or container |
| 2773 | ARR36-CPP. Do not subtract or compare two pointers or iterators that do not refer to the same array or container |
| 2791,2792,2793,,3321,3322 | INT34-CPP. Do not shift a negative number of bits or more bits than exist in the operand |
| 2800,2801,2802,2803 | INT32-CPP. Ensure that operations on signed integers do not result in overflow |
| 2800,2801,2802,2803, | INT08-CPP. Verify that all integer values are in range |
| 2810,2811,2812,2813, | EXP34-CPP. Ensure a null pointer is not dereferenced |
| 2814,2820,2821,2822, | EXP34-CPP. Ensure a null pointer is not dereferenced |
| 2823,2824 | EXP34-CPP. Ensure a null pointer is not dereferenced |
| 2831,2832,2833,2834 | INT33-CPP. Ensure that division and modulo operations do not result in divide-by-zero errors |
| 2840, 2841, 2842, 2843, 2844 | EXP03-CPP. Do not assume the size of a class or struct is the sum of the sizes of its members |
| 2848, 2849 | STR31-CPP. Guarantee that storage for character arrays has sufficient space for character data and the null terminator |
| 2882,2883,2877,2032, | MSC07-CPP. Detect and remove dead code |
| 2910,2911,2912,2913 | INT08-CPP. Verify that all integer values are in range |
| 2910,2911,2912,2913 | INT30-CPP. Ensure that unsigned integer operations do not wrap |
| 2930, 2931, 2932, 2933, | ARR38-CPP. Do not add or subtract an integer to a pointer or iterator if the resulting value does not refer to a valid element in the array or container |
| 2934, 2950, 2951, 2952, | ARR38-CPP. Do not add or subtract an integer to a pointer or iterator if the resulting value does not refer to a valid element in the array or container |
| 2940,2941,2942,2943, | INT16-CPP. Do not make assumptions about representation of signed integers |
| 2945,2946,2947,2948 | INT16-CPP. Do not make assumptions about representation of signed integers |
| 2953 | ARR38-CPP. Do not add or subtract an integer to a pointer or iterator if the resulting value does not refer to a valid element in the array or container |
| 2961,2962,2963,2966, | EXP33-CPP. Do not reference uninitialized memory |
| 2967,2968,2971,2972, | EXP33-CPP. Do not reference uninitialized memory |
| 2973,2976, 2977, 2978 | EXP33-CPP. Do not reference uninitialized memory |
| 2980,2981,2982,2983, | MSC07-CPP. Detect and remove dead code |
| 2982,2983,2984,2985, | MSC13-CPP. Detect and remove unused values |
| 2984,2985,2986,3099, | MSC07-CPP. Detect and remove dead code |
| 2986 | MSC13-CPP. Detect and remove unused values |
| 3000,3001,3002,3003,3005,3006,3007,3010,3011,3012,3015,3016 | INT02-CPP. Understand integer conversion rules |
| 3001 | STR07-CPP. Don't assume numeric values for expressions with type plain character |
| 3003,3004 | INT13-CPP. Use bitwise operators only on unsigned operands |
| 3010,3000,2850,2851,2852,2853,2855-2858,2890-2898,2900,2901,2901,2903,2905,2906,2907,2908 | INT31-CPP. Ensure that integer conversions do not result in lost or misinterpreted data |
| 3011 | FLP33-CPP. Convert integers to floating point for floating point operations |
| 3011 | FLP34-CPP. Ensure that floating point conversions are within range of the new type |
| 3011 | FLP36-CPP. Beware of precision loss when converting integral types to floating point |
| 3013 | INT36-CPP. Do not use out-of-range enumeration values |
| 3017 | EXP11-CPP. Do not apply operators expecting one type to data of an incompatible type |
| 3030 | EXP11-CPP. Do not apply operators expecting one type to data of an incompatible type |
| 3033,3038 | EXP36-CPP. Do not convert pointers into more strictly aligned pointer types |
| 3044,3045 | INT11-CPP. Take care when converting from pointer to integer or integer to pointer |
| 3051 | STR34-CPP. Cast characters to unsigned types before converting to larger integer sizes |
| 3058 | MSC02-CPP. Avoid errors of omission |
| 3060,3083 | EXP35-CPP. Do not cast away a const qualification |
| 3061 | EXP32-CPP. Do not access a volatile object through a non-volatile reference |
| 3062 | EXP38-CPP. Do not modify constant values |
| 3063,3064 | STR05-CPP. Use pointers to const when referring to string literals |
| 3063,3064,3605, | STR30-CPP. Do not attempt to modify string literals |
| 3072,3073 | ARR39-CPP. Do not treat arrays polymorphically |
| 3072,3073 | OOP33-CPP. Do not slice polymorphic objects |
| 3076 | EXP13-CPP. Prefer dynamic_cast over static_cast over reinterpret_cast |
| 3080,3082 | EXP05-CPP. Do not use C-style casts |
| 3090 | EXP14-CPP. Do not use reinterpret_cast on pointers to class objects with multiple inheritence |
| 3100,3101,3102,4017 | MSC07-CPP. Detect and remove dead code |
| 3220,3221,3222,3223 | EXP10-CPP. Do not depend on the order of evaluation of subexpressions or the order in which side effects take place |
| 3220,3221,3222,3223 | EXP30-CPP. Do not depend on order of evaluation between sequence points |
| 3224 | ERR01-CPP. Use ferror() rather than errno to check for FILE stream errors |
| 3230 | EXP02-CPP. Be aware of the short-circuit behavior of the logical AND and OR operators |
| 3231 | EXP02-CPP. Be aware of the short-circuit behavior of the logical AND and OR operators |
| 3240 | EXP06-CPP. Operands to the sizeof operator should not contain side effects |
| 3242,3243,3244, | MSC03-CPP. Avoid errors of addition |
| 3244,3245 | MSC12-CPP. Detect and remove code that has no effect |
| 3245,4060 | MSC03-CPP. Avoid errors of addition |
| 3247,3248,3249,3250, | MSC14-CPP. Do not introduce unnecessary platform dependencies |
| 3270 | FLP35-CPP. Take granularity into account when comparing floating point values |
| 3290 | EXP18-CPP. Prefer the prefix forms of ++ and -- |
| 3292 | EXP18-CPP. Prefer the prefix forms of ++ and -- |
| 3301 | OOP05-CPP. Avoid deleting this |
| 3320,3400,3401 | MSC14-CPP. Do not introduce unnecessary platform dependencies |
| 3330,3331,3332,3334,1530 | MEM39-CPP. Resources allocated by memory allocation functions must be released using the corresponding memory deallocation function |
| 3332,3334,1530,3968 | MEM08-CPP. Use new and delete rather than raw memory allocation and deallocation |
| 3337,3338,3339 | MEM11-CPP. Allocate and free memory in the same module, at the same level of abstraction |
| 3337,3338,3339 | MEM31-CPP. Free dynamically allocated memory exactly once |
| 3403 | OOP34-CPP. Ensure the proper destructor is called for polymorphic objects |
| 3500,3505,3506, | ERR08-CPP. Prefer special-purpose types for exceptions |
| 3507,4033 | ERR08-CPP. Prefer special-purpose types for exceptions |
| 3508 | ERR14-CPP. Do not allow an exception class's copy constructor to throw exceptions |
| 3510 | ERR35-CPP. A handler in a constructor or destructor's function-try-block should not reference class data |
| 3606,3607 | STR30-CPP. Do not attempt to modify string literals |
| 3700,3702,3703 | EXP00-CPP. Use parentheses for precedence of operation |
| 3700,3709 | EXP17-CPP. Treat relational and equality operators as if they were nonassociative |
| 3705 | EXP08-CPP. Ensure pointer arithmetic is used correctly |
| 3705,3706,3707 | ARR37-CPP. Do not add or subtract an integer to a pointer to a non-array object |
| 3706 | EXP08-CPP. Ensure pointer arithmetic is used correctly |
| 3708 | FLP02-CPP. Avoid using floating point numbers when precise computation is needed |
| 3715,3716,3717 | INT07-CPP. Use only explicitly signed or unsigned char type for numeric values |
| 3802 | EXP12-CPP. Do not ignore values returned by functions or methods |
| 4011 | MSC18-CPP. Finish every set of statements associated with a case label with a break statement |
| 4013,4014 | MSC20-CPP. Do not use a switch statement to transfer control into a complex block |
| 4024, 4028, 4625, | OOP35-CPP. Do not return references to private data |
| 4031 | ERR09-CPP. Throw anonymous temporaries and catch by reference |
| 4032,4631,4633,3509 | ERR33-CPP. Destructors must not throw exceptions |
| 4037,4038,4636,4637 | ERR30-CPP. Try to recover gracefully from unexpected errors |
| 4040,4034 | ERR36-CPP. Multiple catch handlers to a try block should order their exceptions from most derived to most basic |
| 4053,4056,4058 | OOP37-CPP. Constructor initializers should be ordered correctly |
| 4070 | MSC01-CPP. Strive for logical completeness |
| 4071 | EXP19-CPP. Do not perform assignments in conditional expressions |
| 4071 | MSC02-CPP. Avoid errors of omission |
| 4072,4073,4075,4076 | MEM42-CPP. Ensure that copy assignment operators do not damage an object that is copied to itself |
| 4075,4076 | ERR39-CPP. Guarantee exception safety |
| 4090 | DCL03-CPP. Use a static assertion to test the value of a constant expression |
| 4101, 4102, 4206, 4207, 4218, | DCL19-CPP. Initialize automatic local variables on declaration |
| 4107, 4108, 1808 | DCL04-CPP. Do not declare more than one variable per declaration |
| 4213,4283 | DCL13-CPP. Declare function parameters that are pointers to values not changed by the function as const |
| 4219, 4265, 4269, 4270, 4271, 4272 | DCL19-CPP. Initialize automatic local variables on declaration |
| 4234 | FLP30-CPP. Do not use floating point variables as loop counters |
| 424 | MEM02-CPP. Immediately cast the result of a memory allocation function call into a pointer to the allocated type |
| 4260,4261,4273,4274, | OOP30-CPP. Do not invoke virtual functions from constructors or destructors |
| 4275,4276,4277,4278, | OOP30-CPP. Do not invoke virtual functions from constructors or destructors |
| 4279,4280,4281,4282 | OOP30-CPP. Do not invoke virtual functions from constructors or destructors |
| 4400,4401,4402,4403,4404,4405,4406,4408,4409,4414,4415 | DCL06-CPP. Use meaningful symbolic constants to represent literal values in program logic |
| 4400,4401,4405 | EXP07-CPP. Do not diminish the benefits of constants by assuming their values in expressions |
| 4610,4611 | MSC01-CPP. Strive for logical completeness |
| 4626, 4627, 4628 | OOP35-CPP. Do not return references to private data |
| 4647 | MSC35-CPP. Do not use goto statement to take control inside the try and catch blocks |
| Secondary Analysis | PRE04-CPP. Do not reuse a standard header file name |
| Secondary Analysis | PRE31-CPP. Avoid side-effects in arguments to unsafe macros |
| Secondary Analysis | DCL09-CPP. Declare functions that return errno with a return type of errno_t |
| Secondary Analysis | INT06-CPP. Use strtol() or a related function to convert a string token to an integer |
| Secondary Analysis | MEM00-CPP. Don't use auto_ptr where copy semantics might be expected |
| Secondary Analysis | ERR34-CPP. Do not use longjmp |
| warncall | PRE09-CPP. Do not replace secure functions with less secure functions |
