cppcheck News
Static source code analysis tool for C and C++ code
Brought to you by:
danielmarjamaki
Menu
▾
▴
Posted by
2016-01-09
Cppcheck-1.72
Cppcheck-1.72 has been released.
General changes:
- Added platform files to customize characteristics of different target platforms
- Added setting to configure the default sign of integral variables and bit size of type 'char'
- Added option -E (only preprocess the code)
- Option --dump now outputs data for each configurations, not only the last one
- Several qmake project files have been removed
Removed checks:
- Check for unnecessary forward declaration has been removed
New checks:
- Warn about shifting negative values
- Detect statements with undefined execution order (pre-C++11 code)
- Added a generic check to discourage usage of specific functions, replacing CheckNonReentrantFunctions and CheckObsoleteFunctions
Checking improvements:
- Several improvmenets to ValueFlow analysis
- Improved ValueType handling, refactored several checks to make use of it
- Improved memory leak checking
- Improved Container specification in Library files, rewrote some checks based on it
- Improved handling of character literals
- Improved checking for non-interlocked accesses
- Properly support <cstdint> types in namespace std
- Added some validation mechamisms to avoid crashs
GUI:
- Improved Library editor
- Support "Enter" key in results tree
- Properly detect editors on 64-Bit Windows
- Added Japanese translation
- Allow opening project file without extra parameter from command line
Additionally, lots of false positives and bugs have been fixed and several existing checks have been improved.
2016-01-09
Hi Daniel,
the download links on the site http://cppcheck.sourceforge.net/ seem to be very strange:
ftp://cppcheck.osuosl.org/cppcheck/1.72/cppcheck-1.72-x64-Setup.msi
and
ftp://cppcheck.osuosl.org/cppcheck/1.72/cppcheck-1.72-x86-Setup.msi
Could you please check this?!
Strange? Why? We simply changed the file server since last release.
Strange, because the website is hosted on SourceForge and downloads too.
But the download links provided on the website point to somewhere else.
And there was no message, that the file server has been changed.
Hi Daniel, I downloaded and installed it and it works perfect. This is great news, because the problems with installing the 1.70 version caused me to skip 1.71. Now I'm happy again :-)
Hello!
I recommend that you download from the ftp server. Because Sourceforge can't mess with our MSI and add adware then, like they did for GIMP:
http://www.makeuseof.com/tag/rise-fall-slashdot-media/
It is very unfortunate that Sourceforge put adware in the installers. I have highly appreciated the Sourceforge download service.
They now officially say that they may add adware but only if project agree. That makes me worried. I have bad experience about their communication - they shut down our trac a few years ago without any prior notice.
This is a problem for me as my company doesn't allow ftp downloads. Can you change it to a http download?
Actually stumbled across the sourceforge download:
https://sourceforge.net/projects/cppcheck/files/cppcheck/1.72/cppcheck-1.72-x64-Setup.msi/download
I know lots of people that do not download anything from sourceforge anymore. I do not trust any exe or msi downloaded from here, and I won't run it on my computer.
I don't get why projects are still staying on a site that adds adware to its software. There's great free alternatives out there like GitHub, Gitbucket, and I'm sure many more, that do not potentially add adware to software.
I would like to write such message here:
https://sourceforge.net/projects/cppcheck/
and here:
https://sourceforge.net/projects/cppcheck/files/cppcheck/1.72/
but see no great way to do so.
I also had problems with the FTP download -- can you post the SHA-1 hashes of the official .msi files so we can verify the SourceForge downloads have not been tampered with? Thanks!
cppcheck-1.72-x64-Setup.msi :
cb91e6f53972f7d4408265f8f3cf78a021ef7a3e
cppcheck-1.72-x86-Setup.msi
a51a42debabe3c3136535ab05575e6288e5ea3b4
I will try to use github for next release.