Checker | Guideline |
|---|
| ALLOC.DF | MEM51-CPP. Properly deallocate dynamically allocated resources |
| ALLOC.DF | OOP54-CPP. Gracefully handle self-copy assignment |
| ALLOC.FNH | MEM51-CPP. Properly deallocate dynamically allocated resources |
| ALLOC.LEAK | MEM51-CPP. Properly deallocate dynamically allocated resources |
| ALLOC.LEAK | FIO51-CPP. Close files when they are no longer needed |
| ALLOC.LEAK | ERR56-CPP. Guarantee exception safety |
| ALLOC.LEAK | ERR57-CPP. Do not leak resources when handling exceptions |
| ALLOC.LEAK | OOP54-CPP. Gracefully handle self-copy assignment |
| ALLOC.TM | EXP51-CPP. Do not delete an array through a pointer of the incorrect type |
| ALLOC.TM | MEM51-CPP. Properly deallocate dynamically allocated resources |
| ALLOC.UAF | EXP54-CPP. Do not access an object outside of its lifetime |
| ALLOC.UAF | CTR51-CPP. Use valid references, pointers, and iterators to reference elements of a container |
| ALLOC.UAF | STR52-CPP. Use valid references, pointers, and iterators to reference elements of a basic_string |
| ALLOC.UAF | MEM50-CPP. Do not access freed memory |
| ALLOC.UAF | OOP54-CPP. Gracefully handle self-copy assignment |
| BADFUNC.ABORT | ERR50-CPP. Do not abruptly terminate the program |
| BADFUNC.ATOF | ERR62-CPP. Detect errors when converting a string to a number |
| BADFUNC.ATOI | ERR62-CPP. Detect errors when converting a string to a number |
| BADFUNC.ATOL | ERR62-CPP. Detect errors when converting a string to a number |
| BADFUNC.ATOLL | ERR62-CPP. Detect errors when converting a string to a number |
| BADFUNC.BO.* | CTR52-CPP. Guarantee that library functions do not overflow |
| BADFUNC.EXIT | ERR50-CPP. Do not abruptly terminate the program |
| BADFUNC.LONGJMP | ERR52-CPP. Do not use setjmp() or longjmp() |
| BADFUNC.MEMCMP | EXP62-CPP. Do not access the bits of an object representation that are not part of the object's value representation |
| BADFUNC.MEMCMP | OOP57-CPP. Prefer special member functions and overloaded operators to C Standard Library functions |
| BADFUNC.MEMSET | EXP62-CPP. Do not access the bits of an object representation that are not part of the object's value representation |
| BADFUNC.MEMSET | OOP57-CPP. Prefer special member functions and overloaded operators to C Standard Library functions |
| BADFUNC.RANDOM.RAND | MSC50-CPP. Do not use std::rand() for generating pseudorandom numbers |
| BADFUNC.SETJMP | ERR52-CPP. Do not use setjmp() or longjmp() |
| BADMACRO.OFFSETOF | EXP59-CPP. Use offsetof() on valid types and members |
| BADMACRO.STDARG_H | EXP58-CPP. Pass an object of the correct type to va_start |
| CONCURRENCY.BADFUNC.CNDSIGNAL | CON55-CPP. Preserve thread safety and liveness when using condition variables |
| CONCURRENCY.BADFUNC.CNDWAIT | CON54-CPP. Wrap functions that can spuriously wake up in a loop |
| CONCURRENCY.DATARACE | CON52-CPP. Prevent data races when accessing bit-fields from multiple threads |
| CONCURRENCY.LOCALARG | CON50-CPP. Do not destroy a mutex while it is locked |
| CONCURRENCY.LOCK.NOUNLOCK | CON51-CPP. Ensure actively held locks are released on exceptional conditions |
| CONCURRENCY.LOCK.ORDER | CON53-CPP. Avoid deadlock by locking in a predefined order |
| CONCURRENCY.TL | CON56-CPP. Do not speculatively lock a non-recursive mutex that is already owned by the calling thread |
| HARDCODED.SEED | MSC51-CPP. Ensure your random number generator is properly seeded |
| IO.DC | OOP54-CPP. Gracefully handle self-copy assignment |
| IO.IOWOP | FIO50-CPP. Do not alternately input and output from a file stream without an intervening positioning call |
| IO.OIWOP | FIO50-CPP. Do not alternately input and output from a file stream without an intervening positioning call |
| IO.UAC | EXP54-CPP. Do not access an object outside of its lifetime |
| IO.UAC | OOP54-CPP. Gracefully handle self-copy assignment |
| LANG.CAST.COERCE | INT50-CPP. Do not cast to an out-of-range enumeration value |
| LANG.CAST.OBJSLICE | OOP51-CPP. Do not slice derived objects |
| LANG.CAST.PC.INC | EXP57-CPP. Do not cast or delete pointers to incomplete classes |
| LANG.CAST.VALUE | INT50-CPP. Do not cast to an out-of-range enumeration value |
| LANG.FUNCS.COPINC | OOP58-CPP. Copy operations must not mutate the source object |
| LANG.ID.NU.MK | DCL51-CPP. Do not declare or define a reserved identifier |
| LANG.MEM.BO | CTR50-CPP. Guarantee that container indices and iterators are within the valid range |
| LANG.MEM.BO | CTR52-CPP. Guarantee that library functions do not overflow |
| LANG.MEM.BO | CTR53-CPP. Use valid iterator ranges |
| LANG.MEM.BO | STR50-CPP. Guarantee that storage for strings has sufficient space for character data and the null terminator |
| LANG.MEM.BO | STR53-CPP. Range check element access |
| LANG.MEM.BO | MEM54-CPP. Provide placement new with properly aligned pointers to sufficient storage capacity |
| LANG.MEM.BU | CTR50-CPP. Guarantee that container indices and iterators are within the valid range |
| LANG.MEM.BU | STR53-CPP. Range check element access |
| LANG.MEM.NPD | EXP63-CPP. Do not rely on the value of a moved-from object |
| LANG.MEM.NPD | STR51-CPP. Do not attempt to create a std::string from a null pointer |
| LANG.MEM.NPD | OOP54-CPP. Gracefully handle self-copy assignment |
| LANG.MEM.TBA | CTR50-CPP. Guarantee that container indices and iterators are within the valid range |
| LANG.MEM.TBA | CTR52-CPP. Guarantee that library functions do not overflow |
| LANG.MEM.TBA | STR53-CPP. Range check element access |
| LANG.MEM.TO | CTR50-CPP. Guarantee that container indices and iterators are within the valid range |
| LANG.MEM.TO | STR50-CPP. Guarantee that storage for strings has sufficient space for character data and the null terminator |
| LANG.MEM.TO | STR53-CPP. Range check element access |
| LANG.MEM.TU | CTR50-CPP. Guarantee that container indices and iterators are within the valid range |
| LANG.MEM.TU | STR53-CPP. Range check element access |
| LANG.MEM.UVAR | EXP53-CPP. Do not read uninitialized memory |
| LANG.MEM.UVAR | EXP63-CPP. Do not rely on the value of a moved-from object |
| LANG.MEM.UVAR | OOP55-CPP. Do not use pointer-to-member operators to access nonexistent members |
| LANG.STRUCT.CUP | CTR54-CPP. Do not subtract iterators that do not refer to the same container |
| LANG.STRUCT.DECL.ANH | DCL59-CPP. Do not define an unnamed namespace in a header file |
| LANG.STRUCT.DECL.FNEST | DCL53-CPP. Do not write syntactically ambiguous declarations |
| LANG.STRUCT.DECL.RESERVED | DCL51-CPP. Do not declare or define a reserved identifier |
| LANG.STRUCT.DECL.SNM | DCL58-CPP. Do not modify the standard namespaces |
| LANG.STRUCT.DEF.FDH | DCL60-CPP. Obey the one-definition rule |
| LANG.STRUCT.DEF.ODH | DCL60-CPP. Obey the one-definition rule |
| LANG.STRUCT.DNVD | OOP52-CPP. Do not delete a polymorphic object without a virtual destructor |
| LANG.STRUCT.ELLIPSIS | DCL50-CPP. Do not define a C-style variadic function |
| LANG.STRUCT.EXCP.CATCH | DCL57-CPP. Do not let exceptions escape from destructors or deallocation functions |
| LANG.STRUCT.EXCP.CATCH | ERR61-CPP. Catch exceptions by lvalue reference |
| LANG.STRUCT.EXCP.THROW | DCL57-CPP. Do not let exceptions escape from destructors or deallocation functions |
| LANG.STRUCT.EXCP.THROW | ERR55-CPP. Honor exception specifications |
| LANG.STRUCT.EXCP.THROW | ERR58-CPP. Handle all exceptions thrown before main() begins executing |
| LANG.STRUCT.EXCP.THROW | ERR61-CPP. Catch exceptions by lvalue reference |
| LANG.STRUCT.ICOL | CON54-CPP. Wrap functions that can spuriously wake up in a loop |
| LANG.STRUCT.INIT.CYCLE | DCL56-CPP. Avoid cycles during initialization of static objects |
| LANG.STRUCT.INIT.OOMI | OOP53-CPP. Write constructor member initializers in the canonical order |
| LANG.STRUCT.INIT.UNORDERED | DCL56-CPP. Avoid cycles during initialization of static objects |
| LANG.STRUCT.MRS | MSC52-CPP. Value-returning functions must return a value from all exit paths |
| LANG.STRUCT.PARITH | CTR50-CPP. Guarantee that container indices and iterators are within the valid range |
| LANG.STRUCT.PARITH | CTR56-CPP. Do not use pointer arithmetic on polymorphic objects |
| LANG.STRUCT.PBB | CTR50-CPP. Guarantee that container indices and iterators are within the valid range |
| LANG.STRUCT.PPE | CTR50-CPP. Guarantee that container indices and iterators are within the valid range |
| LANG.STRUCT.RC | OOP54-CPP. Gracefully handle self-copy assignment |
| LANG.STRUCT.RFNR | MSC53-CPP. Do not return from a function declared [[noreturn]] |
| LANG.STRUCT.RPL | EXP53-CPP. Do not read uninitialized memory |
| LANG.STRUCT.SE.DEC | EXP50-CPP. Do not depend on the order of evaluation for side effects |
| LANG.STRUCT.SE.INC | EXP50-CPP. Do not depend on the order of evaluation for side effects |
| LANG.STRUCT.SE.SIZEOF | EXP52-CPP. Do not rely on side effects in unevaluated operands |
| LANG.STRUCT.SUP | CTR54-CPP. Do not subtract iterators that do not refer to the same container |
| LANG.STRUCT.UCTCH | ERR51-CPP. Handle all exceptions |
| LANG.STRUCT.UCTCH | ERR54-CPP. Catch handlers should order their parameter types from most derived to least derived |
| LANG.STRUCT.VCALL_IN_CTOR | OOP50-CPP. Do not invoke virtual functions from constructors or destructors |
| LANG.STRUCT.VCALL_IN_DTOR | OOP50-CPP. Do not invoke virtual functions from constructors or destructors |
| MISC.CRYPTO.TIMESEED | MSC51-CPP. Ensure your random number generator is properly seeded |
| MISC.MEM.NTERM | STR50-CPP. Guarantee that storage for strings has sufficient space for character data and the null terminator |
| MISC.PADDING.POTB | DCL55-CPP. Avoid information leakage when passing a class object across a trust boundary |
