learned from 17 years of Cppcheck development Daniel MarjamäkiTesting: Check Debian ● To test Cppcheck ● We check the Debian code continuously using a “BOINC” like system. ○ We have a server provides (slowest) What we learned from 17 years of Cppcheck development Daniel MarjamäkiWhat does it find in Debian source code ● Buffer overflows => ~1900 ● Uninitialized variables => ~16000 ● Null pointer dereference

○ Don’t need or want a unique solution! ● About Bloomberg’s C++ ○ More than 30K C++ projects, Debian-based packaging ○ Over 500 million lines of code ○ Same open source libs you use: zlib, fmt, protobuf existing install(EXPORT …) calls ○ Should work with existing packaging approaches ■ Conan 2.0, vcpkg, Debian, etc. 28Upside: Easier CMake interop ● Build system interop and freedom! ● Generate via templated

too. 1.4 All platforms, all build systems and compilers Conan works on Windows, Linux (Ubuntu, Debian, RedHat, ArchLinux, Raspbian), OSX, FreeBSD, and SunOS, and, as it is portable, it might work in installed on your system. If it isn’t, check the installation guidelines in the pipx documentation. For Debian-based distributions, you can install pipx using the system package manager: $ apt-get install pipx self-contained executable There will be a number of existing installers in Conan downloads for OSX Brew, Debian, Windows, Linux Arch, that will not require Python first. We also distribute Conan binaries for

too. 1.4 All platforms, all build systems and compilers Conan works on Windows, Linux (Ubuntu, Debian, RedHat, ArchLinux, Raspbian), OSX, FreeBSD, and SunOS, and, as it is portable, it might work in installed on your system. If it isn’t, check the installation guidelines in the pipx documentation. For Debian-based distributions, you can install pipx using the system package manager: $ apt-get install pipx self-contained executable There will be a number of existing installers in Conan downloads for OSX Brew, Debian, Windows, Linux Arch, that will not require Python first. We also distribute Conan binaries for

too. 1.4 All platforms, all build systems and compilers Conan works on Windows, Linux (Ubuntu, Debian, RedHat, ArchLinux, Raspbian), OSX, FreeBSD, and SunOS, and, as it is portable, it might work in installed on your system. If it isn’t, check the installation guidelines in the pipx documentation. For Debian-based distributions, you can install pipx using the system package manager: $ apt-get install pipx self-contained executable There will be a number of existing installers in Conan downloads for OSX Brew, Debian, Windows, Linux Arch, that will not require Python first. We also distribute Conan binaries for

too. 1.4 All platforms, all build systems and compilers Conan works on Windows, Linux (Ubuntu, Debian, RedHat, ArchLinux, Raspbian), OSX, FreeBSD, and SunOS, and, as it is portable, it might work in installed on your system. If it isn’t, check the installation guidelines in the pipx documentation. For Debian-based distributions, you can install pipx using the system package manager: $ apt-get install pipx self-contained executable There will be a number of existing installers in Conan downloads for OSX Brew, Debian, Windows, Linux Arch, that will not require Python first. We also distribute Conan binaries for

too. 1.4 All platforms, all build systems and compilers Conan works on Windows, Linux (Ubuntu, Debian, RedHat, ArchLinux, Raspbian), OSX, FreeBSD, and SunOS, and, as it is portable, it might work in mode, as explained by sections package_id() and build_id() (e.g. you may consider some Ubuntu and Debian packages to be compatible with each other) • Generate different packages for each distribution. like: os: Windows: subsystem: [None, cygwin, msys, msys2, wsl] distro: [None, RHEL6, CentOS, Debian] If we want to create different binaries from our recipes defining this new setting, we would need

too. 1.4 All platforms, all build systems and compilers Conan works on Windows, Linux (Ubuntu, Debian, RedHat, ArchLinux, Raspbian), OSX, FreeBSD, and SunOS, and, as it is portable, it might work in mode, as explained by sections package_id() and build_id() (e.g. you may consider some Ubuntu and Debian packages to be compatible with each other) • Generate different packages for each distribution. like: os: Windows: subsystem: [None, cygwin, msys, msys2, wsl] distro: [None, RHEL6, CentOS, Debian] If we want to create different binaries from our recipes defining this new setting, we would need

too. 1.4 All platforms, all build systems and compilers Conan works on Windows, Linux (Ubuntu, Debian, RedHat, ArchLinux, Raspbian), OSX, FreeBSD, and SunOS, and, as it is portable, it might work in installed on your system. If it isn’t, check the installation guidelines in the pipx documentation. For Debian-based distributions, you can install pipx using the system package manager: $ apt-get install pipx self-contained executable There will be a number of existing installers in Conan downloads for OSX Brew, Debian, Windows, Linux Arch, that will not require Python first. We also distribute Conan binaries for

too. 1.4 All platforms, all build systems and compilers Conan works on Windows, Linux (Ubuntu, Debian, RedHat, ArchLinux, Raspbian), OSX, FreeBSD, and SunOS, and, as it is portable, it might work in installed on your system. If it isn’t, check the installation guidelines in the pipx documentation. For Debian-based distributions, you can install pipx using the system package manager: $ apt-get install pipx self-contained executable There will be a number of existing installers in Conan downloads for OSX Brew, Debian, Windows, Linux Arch, that will not require Python first. We also distribute Conan binaries for