## +24 ## Building Cppcheck What We Learned From 17 Years of Development DANIEL MARJAMÄKI 20 24 September 15 - 20 ## Daniel Marjamäki • Creator of Cppcheck ☐ Cppcheck looks for bugs in your C/C++ almost 20 years ## What will I say • Chronological walk through • Learnings ## Before I started Cppcheck • Feeling that quality was not very good • Our compilers would not find obvious bugs int buf[10]; experiment • Started experimenting with perl and regular expressions ## Sourceforge I registered the Cppcheck project on Sourceforge on may 7th, 2007. First commit: • Source files, only 1 o Main.cpp ☑

debugging and analysis tools • Your C++ compiler (warnings) • Static code analysis tools (coverity, cppcheck, ...) • Interactive debuggers (gdb, Ildb, msvc, udb, ...) • Time-travel debuggers (gdb, rr, liverecorder tools at your disposal • Enable C++ compiler warnings • Static code analysis tools (coverity, cppcheck, ...) • Interactive debuggers (gdb, lldb, msvc, udb, ...) • Time-travel debuggers (gdb, rr, liverecorder

0146651d100a36efb/p22_1.jpg) 源代码索引和统计 ## 提高分析质量 □ 测试项目 glog （谷歌的日志项目），17个源文件。 cppcheck不带编译分析： 111个分析报告 □cppcheck带编译分析： 280个分析报告 ![Image](/uploads/documents/d/f/4/2/df4204d40f8d9990146651d100a36efb/p23_1

https://clang-analyzer.lvm.org clang-tidy https://clang.llvm.org/extra/clang-tidy Cppcheck https://github.com/danmar/cppcheck PVS-Studio https://pvs-studio.com ## Dynamic analysis ![Image](/uploads/do

* Actual functions that are never called * Find with static analysis tools – Coverity, cppcheck, IDE Functions never accessed with current user input Monitor usage in production over

colspan="2">curve_untest_jobbuild #448(21 min)☑curve_cppcheck_jobbuild #239(28 sec)☑curve_robot_jobbuild

library  ✓ Building Cppcheck - What We Learned from 17 Years of Development Daniel Marjamäki ![Image](/uploads/documents/e

on-the-fly syntax checking for Emacs| |elpa-relint|V:0, I:0|147|Emacs Lisp regexp mistake finder| |cppcheck-gui|V:0, I:1|6941|tool for static C/C++ code analysis (GUI)| |shellcheck|V:2, I:12|18987|lint tool

法检查利器| |elpa-flycheck|V:0, I:1|808|Emacs现代实时语法检查| |elpa-relint|V:0, I:0|147|Emacs Lisp正则错误发现器| |cppcheck-gui|V:0, I:1|6941|静态C/C++代码分析工具(GUI)| |shellcheck|V:2, I:12|18987|shell脚本的lint工具| |pyflakes3|V:2

Syntaxprüfung für Emacs| |elpa-relint|V:0, I:0|147|Fehlersuche mittels Regexp für Emacs-Lisp-Dateien| |cppcheck-gui|V:0, I:1|7224|Werkzeug für die statische C/C++-Code-Analyse (GUI)| |shellcheck|V:2, I:13|18987|Lint-Werkzeug