cppcheck-opensource/cppcheck

Features

• C/C++ Static Analysis - Scans C and C++ source code to identify programming errors and memory leaks without executing the program.
• Bug Detection Engines - Provides a bug detection engine that identifies logical errors and concurrency issues in C++ source.
• Code Analysis and Linters - Integrates linting capabilities to enforce coding standards and naming conventions across C++ codebases.
• C/C++ Linters - Functions as a code analysis utility that enforces coding standards and identifies style violations.
• Lexical Tokenizers - Converts raw source text into a stream of tokens for structural pattern identification and style enforcement.
• Coding Standard Compliance - Analyzes source code against industry guidelines and secure coding standards for compliance.
• Control-Flow Graph Generation - Models execution paths using control-flow graphs to detect concurrency issues and unreachable code.
• Naming Conventions - Validates that variables, constants, and functions follow specific regular expression naming patterns.
• Symbolic Type Tracking - Maintains a registry of variable types and casts to identify type mismatches and memory errors.
• Syntax Tree Analysis - Parses source code into syntax trees to evaluate logical flow and detect errors without execution.
• C/C++ Static Analysis Tools - Provides a tool for detecting programming errors, memory leaks, and security violations in C and C++.
• Concurrency Issues - Inspects code for thread-safety problems and unsafe usage of static local objects.
• Static Analysis Rules - Enables the creation of custom analysis rules using regular expressions to identify specific coding patterns.
• Quality Assurance Practices - Verifies that code adheres to industry standards and secure coding guidelines for improved reliability.
• Quality Assurance Tools - Provides a quality assurance tool for auditing type casts and verifying secure coding compliance.
• Analysis Exclusions - Prevents specific files, generated code, or system headers from being scanned during analysis.
• Analysis File Filters - Allows selecting a subset of files for analysis using globbing patterns.
• Incremental Analysis - Tracks modification timestamps to skip unchanged files and accelerate re-analysis.
• Formatting Enforcement - Enforces consistent rules for indentation, tab sizes, and whitespace to standardize code layout.
• Analysis Suppressions - Provides capabilities to silence specific alerts for known false positives or intentional patterns.
• Execution Resource Optimizations - Optimizes execution performance by controlling multi-threaded job scaling and resource allocation.
• Strictness Levels - Provides strictness levels to toggle between conservative reporting and aggressive detection of potential issues.
• Build Pipeline Integrations - Integrates incremental analysis and report generation into C++ build pipelines to catch defects early.
• Analysis Support - Correctly parses and evaluates non-standard compiler extensions to ensure environment compatibility.
• Analysis Precision Tuning - Allows adjusting analysis precision and depth to balance the trade-off between detection thoroughness and execution speed.
• Type Cast Analysis - Locates and identifies type casts within source code for manual review and auditing.
• Multi-Threaded Batch Processing - Distributes independent analysis tasks across multiple CPU cores to increase processing throughput.
• Recursion Depth Limits - Adjusts recursion limits for template and function analysis to balance thoroughness and speed.
• Static Analysis Reports - Generates web-based HTML reports that summarize static analysis findings with syntax-highlighted code.
• Analysis User Interfaces - Provides a graphical interface for selecting files and reviewing detected programming errors.
• Developer Tools - Static analysis of C/C++ code

Star history