Testing PRs on Debian

CHR — Thu, 22 Oct 2026 09:21:47 -0000

It looks like merged PRs are not flushed out, e.g. https://github.com/cppcheck-opensource/cppcheck/pull/8934

false positive, syntaxError, function try block with override keyword

CHR — Thu, 22 Oct 2026 07:45:28 -0000

Thanks for reporting, ticket is here: https://trac.cppcheck.net/ticket/15126

false positive, syntaxError, function try block with override keyword

Joel Shuman — Wed, 21 Oct 2026 12:25:21 -0000

I also should mention that cppcheck 2.19.0 did not have this false positive.

false positive, syntaxError, function try block with override keyword

Joel Shuman — Wed, 21 Oct 2026 12:14:57 -0000

Hello,
We ran into a corner-case false-positive syntaxError I'd like to report. It is similar to this which was fixed long ago.

In this corner-case, using the override keyword causes the false positive.

struct base {
    virtual ~base() = default;

    virtual void foo()
    try {} catch (...) {};
};

struct special : base {
    void foo() override // This override causes the try on the next line to false fail.
    try {} catch (...) {}
};

int main() {
    special s;
    s.foo();
    return 0;
}

I am testing with cppcheck 2.22.0.

Here is the exact error: syntax error: keyword 'try' is not allowed in class/struct/union/enum scope [syntaxError]

Testing PRs on Debian

john borland — Mon, 19 Oct 2026 15:54:01 -0000

I wrote a couple of bash scripts to run over the weekend to do code coverage of the released 2.22.0 version of cppcheck with debian packages (It's still running). I wasn't sure how you knows a package had C/C++ code in them, so I just pulled from the following 9 PR's below and hopped for the best.

2026-02-18_12-13-45-d234d745fefe-results.txt
2026-10-05_07-31-15-7f232989d1f9-results.txt
2026-10-09_20-01-23-da724f2e5700-results.txt
2026-09-08_13-51-12-2a0c507aec8b-results.txt
2026-10-05_14-59-08-c5bef2ae24cd-results.txt
2026-10-10_20-28-58-72fa07506cc7-results.txt
2026-10-02_13-25-25-9781751b1038-results.txt
2026-10-05_22-41-06-51b980ae69f3-results.txt
2026-10-12_10-41-10-ee06c4593b71-results.txt

That ended up being 4880 uniq packages. My scripts has currently run cppcheck with the folling arguments check=all -D__GNUC__ on 4260 the debian packages.

Here is the Top 75 packages for coverage.

 1  35.74% ./dart-sdk_3.13.4+dfsg1.orig.gcov.output.out.out
 2  34.70% ./wpewebkit_2.54.1.orig.gcov.output.out.out
 3  34.64% ./mariadb-10.5_10.5.23.orig.gcov.output.out.out
 4  34.55% ./kylin-ai-vector-engine_1.2.0.1.orig.gcov.output.out.out
 5  34.47% ./mozjs128_128.14.0.orig.gcov.output.out.out
 6  34.39% ./mozjs78_78.15.0.orig.gcov.output.out.out
 7  34.36% ./mesa_26.2.4.orig.gcov.output.out.out
 8  34.24% ./gromacs_2026.4.orig.gcov.output.out.out
 9  34.21% ./mariadb_11.8.9+ds.orig.gcov.output.out.out
10  34.15% ./tensorflow_2.14.1+dfsg.orig.gcov.output.out.out
11  34.07% ./ardour_9.8.0+ds.orig.gcov.output.out.out
12  34.04% ./audacity_3.7.8+dfsg.orig.gcov.output.out.out
13  34.02% ./cloudcompare_2.13.2+git20240821+ds.orig.gcov.output.out.out
14  33.94% ./nodejs_24.21.0+dfsg+~cs24.13.4.orig.gcov.output.out.out
15  33.93% ./scummvm_2026.1.0+dfsg.orig.gcov.output.out.out
16  33.90% ./trafficserver_9.2.5+ds.orig.gcov.output.out.out
17  33.89% ./lnav_0.13.2.orig.gcov.output.out.out
18  33.77% ./openjfx_21.0.12+3.orig.gcov.output.out.out
19  33.69% ./android-platform-frameworks-native_10.0.0+r36.orig.gcov.output.out.out
20  33.48% ./pytorch_2.12.1+dfsg.orig.gcov.output.out.out
21  33.48% ./msc-generator_8.6.4+dfsg.orig.gcov.output.out.out
22  33.46% ./qt6-3d_6.11.2+dfsg.orig.gcov.output.out.out
23  33.42% ./rspamd_4.1.5.orig.gcov.output.out.out
24  33.41% ./cppcheck_2.22.0.orig.gcov.output.out.out
25  33.39% ./openmsx_21.0+dfsg.orig.gcov.output.out.out
26  33.27% ./onednn_3.12.1+ds.orig.gcov.output.out.out
27  33.24% ./gargoyle-free_2026.1.1+dfsg.orig.gcov.output.out.out
28  33.24% ./0ad_0.28.0.orig.gcov.output.out.out
29  33.22% ./asymptote_3.15+ds.orig.gcov.output.out.out
30  33.21% ./ocp_3.5.0+ds.orig.gcov.output.out.out
31  33.18% ./tulip_6.0.1+dfsg.orig.gcov.output.out.out
32  33.17% ./coot_1.1.18+dfsg.orig.gcov.output.out.out
33  33.13% ./supercollider_3.14.1+repack2.orig.gcov.output.out.out
34  33.12% ./mrpt_2.15.14+ds.orig.gcov.output.out.out
35  33.10% ./indi_2.2.5+dfsg.orig.gcov.output.out.out
36  33.09% ./openmw_0.51.0.orig.gcov.output.out.out
37  33.08% ./horizon-eda_2.6.0.orig.gcov.output.out.out
38  33.08% ./crawl_0.34.1.orig.gcov.output.out.out
39  33.06% ./monero_0.18.5.3+~0+20260428.orig.gcov.output.out.out
40  33.03% ./openfoam_1912.200626.orig.gcov.output.out.out
41  32.96% ./android-cuttlefish_1.55.4+dfsg.1.orig.gcov.output.out.out
42  32.94% ./scilab_2024.1.0+dfsg1.orig.gcov.output.out.out
43  32.90% ./ltt-control_2.16.0.orig.gcov.output.out.out
44  32.85% ./gnudatalanguage_1.1.3.orig.gcov.output.out.out
45  32.83% ./pymol_3.1.0+dfsg.orig.gcov.output.out.out
46  32.83% ./netradiant_1.5.0+git20260429+dfsg.orig.gcov.output.out.out
47  32.81% ./digikam_9.1.0.orig.gcov.output.out.out
48  32.80% ./ucx_1.22.0.orig.gcov.output.out.out
49  32.80% ./dawn_0.0~git20260909.1a75cb7f.orig.gcov.output.out.out
50  32.75% ./grpc_1.83.0.orig.gcov.output.out.out
51  32.74% ./mmseqs2_18-8cc5c+ds.orig.gcov.output.out.out
52  32.66% ./ares_148+dfsg.orig.gcov.output.out.out
53  32.62% ./bitcoin-knots_29.4.knots20260508.2.orig.gcov.output.out.out
54  32.61% ./stella_7.0+dfsg.orig.gcov.output.out.out
55  32.60% ./ddnet_20.0+ds.orig.gcov.output.out.out
56  32.58% ./ugene_52.1+dfsg.orig.gcov.output.out.out
57  32.58% ./protobuf_36.2.orig.gcov.output.out.out
58  32.54% ./librepcb_1.2.0+dfsg.orig.gcov.output.out.out
59  32.53% ./krita_6.0.4.1+dfsg.orig.gcov.output.out.out
60  32.51% ./autofdo_0.19.orig.gcov.output.out.out
61  32.50% ./telegram-desktop_5.7.2+ds.orig.gcov.output.out.out
62  32.48% ./scribus_1.6.6+dfsg.orig.gcov.output.out.out
63  32.48% ./darkradiant_3.9.0.orig.gcov.output.out.out
64  32.46% ./poppler_26.07.0.orig.gcov.output.out.out
65  32.46% ./courier_2.0.6.orig.gcov.output.out.out
66  32.46% ./bpfcc_0.37.0+ds.orig.gcov.output.out.out
67  32.45% ./mkvtoolnix_102.0.orig.gcov.output.out.out
68  32.41% ./thorvg_1.0.6+dfsg.orig.gcov.output.out.out
69  32.41% ./aqsis_1.8.2.orig.gcov.output.out.out
70  32.39% ./ucc_1.9.0.orig.gcov.output.out.out
71  32.38% ./siril_1.4.2.orig.gcov.output.out.out
72  32.36% ./simutrans_124.5.orig.gcov.output.out.out
73  32.33% ./thrift_0.24.0.orig.gcov.output.out.out
74  32.33% ./casadi_3.8.1+ds2.orig.gcov.output.out.out
75  32.32% ./vulkan-validationlayers_1.4.363.0.orig.gcov.output.out.out

Here is the bottom 25 packages for coverage. Given how some of these things are named like Golang for example it might not have a lot of C/C++ code in them.

 1  3.64% ./golang-github-petermattis-goid_0.0~git20260226.17d1149.orig.gcov.output.out.out
 2  4.10% ./biococoa_2.2.2.orig.gcov.output.out.out
 3  4.10% ./crazy-complete_0.3.9.orig.gcov.output.out.out
 4  4.10% ./luacheck_1.2.0.orig.gcov.output.out.out
 5  4.12% ./bettercap-caplets_0+git20240106.orig.gcov.output.out.out
 6  4.17% ./rust-cc_1.2.60.orig.gcov.output.out.out
 7  4.19% ./golang-github-hillu-go-yara_4.3.4.orig.gcov.output.out.out
 8  4.20% ./libwx-glcanvas-perl_0.09.orig.gcov.output.out.out
 9  4.20% ./php-pspell_1.0.1.orig.gcov.output.out.out
10  4.21% ./php-uuid_1.3.0.orig.gcov.output.out.out
11  4.30% ./cstream_4.0.0.orig.gcov.output.out.out
12  4.31% ./cccolutils_1.5.orig.gcov.output.out.out
13  4.31% ./cd-discid_1.4.orig.gcov.output.out.out
14  4.31% ./credcheck_5.0.orig.gcov.output.out.out
15  4.31% ./gkrellshoot_0.4.4.orig.gcov.output.out.out
16  4.31% ./haskell-openglraw_3.3.4.1.orig.gcov.output.out.out
17  4.31% ./libapache2-mod-bw_0.92.orig.gcov.output.out.out
18  4.31% ./libfuture-xs-perl_0.15.orig.gcov.output.out.out
19  4.31% ./purple-rocketchat_0.1~hg20200403.800ef89.orig.gcov.output.out.out
20  4.31% ./sagenb-export_3.4.orig.gcov.output.out.out
21  4.31% ./uim-chewing_0.1.0.orig.gcov.output.out.out
22  4.32% ./autossh_1.4g.orig.gcov.output.out.out
23  4.32% ./gperiodic_3.0.3.orig.gcov.output.out.out
24  4.32% ./indi-webcam_1.1+20260316195637.orig.gcov.output.out.out
25  4.32% ./libapache2-mod-authnz-external_3.3.3.orig.gcov.output.out.out

I know in the comments above you talked about doing more packages based on changes to tokenizer or valueflow.

Here are the top 50 for valueflow.cpp

 1  88.37% ./dart-sdk_3.13.4+dfsg1.orig.gcov.output.out.out
 2  86.52% ./kylin-ai-vector-engine_1.2.0.1.orig.gcov.output.out.out
 3  85.82% ./audacity_3.7.8+dfsg.orig.gcov.output.out.out
 4  85.71% ./nodejs_24.21.0+dfsg+~cs24.13.4.orig.gcov.output.out.out
 5  85.68% ./wpewebkit_2.54.1.orig.gcov.output.out.out
 6  85.30% ./tensorflow_2.14.1+dfsg.orig.gcov.output.out.out
 7  85.10% ./ardour_9.8.0+ds.orig.gcov.output.out.out
 8  84.94% ./lnav_0.13.2.orig.gcov.output.out.out
 9  84.90% ./mesa_26.2.4.orig.gcov.output.out.out
10  84.85% ./mariadb-10.5_10.5.23.orig.gcov.output.out.out
11  84.84% ./telegram-desktop_5.7.2+ds.orig.gcov.output.out.out
12  84.72% ./gromacs_2026.4.orig.gcov.output.out.out
13  84.30% ./qt6-3d_6.11.2+dfsg.orig.gcov.output.out.out
14  84.21% ./android-platform-frameworks-native_10.0.0+r36.orig.gcov.output.out.out
15  84.05% ./mozjs128_128.14.0.orig.gcov.output.out.out
16  84.05% ./mariadb_11.8.9+ds.orig.gcov.output.out.out
17  83.75% ./mozjs78_78.15.0.orig.gcov.output.out.out
18  83.70% ./msc-generator_8.6.4+dfsg.orig.gcov.output.out.out
19  83.70% ./horizon-eda_2.6.0.orig.gcov.output.out.out
20  83.69% ./pytorch_2.12.1+dfsg.orig.gcov.output.out.out
21  83.56% ./cloudcompare_2.13.2+git20240821+ds.orig.gcov.output.out.out
22  83.33% ./rspamd_4.1.5.orig.gcov.output.out.out
23  83.29% ./coot_1.1.18+dfsg.orig.gcov.output.out.out
24  83.28% ./onednn_3.12.1+ds.orig.gcov.output.out.out
25  83.28% ./monero_0.18.5.3+~0+20260428.orig.gcov.output.out.out
26  83.26% ./ltt-control_2.16.0.orig.gcov.output.out.out
27  83.26% ./cppcheck_2.22.0.orig.gcov.output.out.out
28  83.23% ./crawl_0.34.1.orig.gcov.output.out.out
29  83.21% ./openmsx_21.0+dfsg.orig.gcov.output.out.out
30  83.19% ./0ad_0.28.0.orig.gcov.output.out.out
31  83.09% ./perfetto_56.0.orig.gcov.output.out.out
32  83.09% ./dawn_0.0~git20260909.1a75cb7f.orig.gcov.output.out.out
33  82.98% ./asymptote_3.15+ds.orig.gcov.output.out.out
34  82.77% ./android-cuttlefish_1.55.4+dfsg.1.orig.gcov.output.out.out
35  82.68% ./cherrytree_1.2.0+dfsg.orig.gcov.output.out.out
36  82.63% ./bitcoin-knots_29.4.knots20260508.2.orig.gcov.output.out.out
37  82.55% ./tulip_6.0.1+dfsg.orig.gcov.output.out.out
38  82.49% ./trafficserver_9.2.5+ds.orig.gcov.output.out.out
39  82.45% ./openmw_0.51.0.orig.gcov.output.out.out
40  82.45% ./grpc_1.83.0.orig.gcov.output.out.out
41  82.39% ./poppler_26.07.0.orig.gcov.output.out.out
42  82.39% ./highs_1.14.0+ds.orig.gcov.output.out.out
43  82.32% ./indi_2.2.5+dfsg.orig.gcov.output.out.out
44  82.29% ./ddnet_20.0+ds.orig.gcov.output.out.out
45  82.26% ./pymol_3.1.0+dfsg.orig.gcov.output.out.out
46  82.19% ./gargoyle-free_2026.1.1+dfsg.orig.gcov.output.out.out
47  82.17% ./scummvm_2026.1.0+dfsg.orig.gcov.output.out.out
48  82.11% ./ocp_3.5.0+ds.orig.gcov.output.out.out
49  81.94% ./openjfx_21.0.12+3.orig.gcov.output.out.out
50  81.91% ./autofdo_0.19.orig.gcov.output.out.out

Here are the top 50 for tokenize.cpp

 1  74.30% ./dart-sdk_3.13.4+dfsg1.orig.gcov.output.out.out
 2  71.69% ./wpewebkit_2.54.1.orig.gcov.output.out.out
 3  69.96% ./mozjs128_128.14.0.orig.gcov.output.out.out
 4  69.63% ./mozjs78_78.15.0.orig.gcov.output.out.out
 5  69.39% ./mesa_26.2.4.orig.gcov.output.out.out
 6  68.64% ./mariadb-10.5_10.5.23.orig.gcov.output.out.out
 7  67.79% ./kylin-ai-vector-engine_1.2.0.1.orig.gcov.output.out.out
 8  67.75% ./openjfx_21.0.12+3.orig.gcov.output.out.out
 9  67.72% ./gromacs_2026.4.orig.gcov.output.out.out
10  67.56% ./mariadb_11.8.9+ds.orig.gcov.output.out.out
11  67.01% ./trafficserver_9.2.5+ds.orig.gcov.output.out.out
12  66.98% ./cloudcompare_2.13.2+git20240821+ds.orig.gcov.output.out.out
13  66.59% ./ardour_9.8.0+ds.orig.gcov.output.out.out
14  66.46% ./audacity_3.7.8+dfsg.orig.gcov.output.out.out
15  66.19% ./supercollider_3.14.1+repack2.orig.gcov.output.out.out
16  66.15% ./android-platform-frameworks-native_10.0.0+r36.orig.gcov.output.out.out
17  65.99% ./tensorflow_2.14.1+dfsg.orig.gcov.output.out.out
18  65.84% ./nodejs_24.21.0+dfsg+~cs24.13.4.orig.gcov.output.out.out
19  65.71% ./rspamd_4.1.5.orig.gcov.output.out.out
20  65.31% ./lnav_0.13.2.orig.gcov.output.out.out
21  65.13% ./scummvm_2026.1.0+dfsg.orig.gcov.output.out.out
22  64.01% ./msc-generator_8.6.4+dfsg.orig.gcov.output.out.out
23  63.79% ./pytorch_2.12.1+dfsg.orig.gcov.output.out.out
24  63.79% ./asymptote_3.15+ds.orig.gcov.output.out.out
25  63.67% ./qt6-3d_6.11.2+dfsg.orig.gcov.output.out.out
26  63.67% ./monero_0.18.5.3+~0+20260428.orig.gcov.output.out.out
27  63.56% ./protobuf_36.2.orig.gcov.output.out.out
28  63.55% ./ucx_1.22.0.orig.gcov.output.out.out
29  63.49% ./mrpt_2.15.14+ds.orig.gcov.output.out.out
30  63.35% ./ocp_3.5.0+ds.orig.gcov.output.out.out
31  63.18% ./krita_6.0.4.1+dfsg.orig.gcov.output.out.out
32  63.08% ./gargoyle-free_2026.1.1+dfsg.orig.gcov.output.out.out
33  63.01% ./onednn_3.12.1+ds.orig.gcov.output.out.out
34  62.98% ./autofdo_0.19.orig.gcov.output.out.out
35  62.83% ./ugene_52.1+dfsg.orig.gcov.output.out.out
36  62.43% ./dawn_0.0~git20260909.1a75cb7f.orig.gcov.output.out.out
37  62.40% ./indi_2.2.5+dfsg.orig.gcov.output.out.out
38  62.36% ./darkradiant_3.9.0.orig.gcov.output.out.out
39  62.13% ./ltt-control_2.16.0.orig.gcov.output.out.out
40  62.11% ./openmw_0.51.0.orig.gcov.output.out.out
41  62.11% ./cccl_2.5.0.orig.gcov.output.out.out
42  61.99% ./crawl_0.34.1.orig.gcov.output.out.out
43  61.89% ./universal-ctags_6.2.1.orig.gcov.output.out.out
44  61.81% ./grpc_1.83.0.orig.gcov.output.out.out
45  61.77% ./librepcb_1.2.0+dfsg.orig.gcov.output.out.out
46  61.60% ./coot_1.1.18+dfsg.orig.gcov.output.out.out
47  61.58% ./mkvtoolnix_102.0.orig.gcov.output.out.out
48  61.48% ./android-cuttlefish_1.55.4+dfsg.1.orig.gcov.output.out.out
49  61.46% ./qtads_3.4.0+dfsg.orig.gcov.output.out.out
50  61.39% ./numpy_2.4.6+ds.orig.gcov.output.out.out

I still have all the gcov data at the file level if you are intrested.

My idea is pretty simple whenever Cppcheck makes a release (Normally cppcheck does 3 or 4 a year) I could run the coverage data. I have a feeling that structurally these numbers probably don't change too much. I see this having two advantages. One you could add the top 10 to your random list of packages just to make sure you have some with good code coverage. Two you can give developers a script to run against that static 10 locally before submitting their PR. That might reduce the load on your PR system and reduce churn on the PR's themselves.

Let me know if this is of any interest to you.

Thanks

MISRA addon diagnostics are ordered by pointer address, not source location

Christa Ettlinger — Wed, 14 Oct 2026 07:54:47 -0000

I found that cppcheck’s addon dump can produce MISRA diagnostics in a
non-source order.

In SymbolDatabase::printXml() (lib/symboldatabase.cpp), variables are
collected in std::set<const Variable*> before the <variables> XML section
is written. This orders records by object-pointer address instead of a stable
source key.

The MISRA addon reads that XML order into data.variables, and Rule 9.3 then
iterates data.variables directly. Therefore Rule 9.3 diagnostics can be
reported in a different order from the source order, making golden-output
tests flaky.

With the attached test.c, two separate executions using the same cppcheck
version and command produced the same three diagnostics in different orders.

Cppcheck version: 2.21.0
Platform: Windows

Expected diagnostic order:
line 24, line 25, line 27

test.c:24:13: style: Variable 'uniformNormalArray' can be declared as const array 
test.c:25:13: style: Variable 'uniformMatrix' can be declared as const array

test.c:24:13: style: Arrays shall not be partially initialized [misra-c2012-9.3]
    int32_t uniformNormalArray[3] = { INT32_C(0) };
            ^
test.c:25:13: style: Arrays shall not be partially initialized [misra-c2012-9.3]
    int32_t uniformMatrix[2][3] = { { INT32_C(0) } };
            ^
test.c:27:17: style: Arrays shall not be partially initialized [misra-c2012-9.3]
    ArrayHolder uniformArrayHolder = {
                ^

Observed diagnostic order:
line 27, line 25, line 24 ("random" order)

test.c:27:17: style: Arrays shall not be partially initialized [misra-c2012-9.3]
    ArrayHolder uniformArrayHolder = {
                ^
test.c:25:13: style: Arrays shall not be partially initialized [misra-c2012-9.3]
    int32_t uniformMatrix[2][3] = { { INT32_C(0) } };
            ^
test.c:24:13: style: Arrays shall not be partially initialized [misra-c2012-9.3]
    int32_t uniformNormalArray[3] = { INT32_C(0) };
            ^

Suggested fix: serialize addon variables using a stable key, for example
source file + line + column, or variable ID, rather than pointer order.

FP: constVariableReference when using a vector of reference_wrapper items

CHR — Mon, 12 Oct 2026 12:16:59 -0000

Thanks for reporting, ticket is here: https://trac.cppcheck.net/ticket/15103

FP: constVariableReference when using a vector of reference_wrapper items

Dan Workman — Mon, 12 Oct 2026 11:34:58 -0000

Found in cppcheck 2.22

Running
cppcheck --enable=style --std=c++17 --template=gcc repro.cpp

#include <functional>
#include <vector>

struct Item {};

void example()
{
    Item value;
    auto& ref = value;
    std::vector<std::reference_wrapper<Item>> refs{ref};
}

gives
Variable 'ref' can be declared as reference to const [constVariableReference]

Testing PRs on Debian

john borland — Sat, 10 Oct 2026 01:13:06 -0000

Depending on how many tokens you want to use here are other things you can ask AI about a PR.

Will this PR require the cppcheck manual to change?
- if yes which sections.
What unit test cover these changes?
- if no unit test is found can please write one.
What do you think the intent of this PR is?

AI reviews

john borland — Fri, 09 Oct 2026 23:22:25 -0000

To me this talk has lived rent free in my brain since 2012 https://youtu.be/5wwKjdvPxa8 its about how CI can be used as a code reviewer. Most CI systems are pass fail. But there tea leaves that often go unnoticed. I think in the age of AI its probably a good idea to use AI as a first pass aproach to keep from getting overwhelmed. I even know of an open source project that is talking internally about poising their skill file to say all issues must be written using Shakespearen English. That way they can prioritize issues written by people over issues written by AI. All that being said I would see what you can automate information wise to help speed up code reviews. An example would be call graphs. Next is what unit test covers this function change. Those are two things that are very useful to know while reviewing code that often breaks my train of thought when I have to hunt them down while reviewing code. Also here is a post I made along time ago about how I abused the cppcheck misra plugin for code reviews of code that doesn't have to be misra complaint, but I still find it useful for my brain to think about https://sourceforge.net/p/cppcheck/discussion/development/thread/834110f0e7/?page=2&limit=25#aacc

Recent posts to Discussion

Testing PRs on Debian

false positive, syntaxError, function try block with override keyword

false positive, syntaxError, function try block with override keyword

false positive, syntaxError, function try block with override keyword

Testing PRs on Debian

MISRA addon diagnostics are ordered by pointer address, not source location

FP: constVariableReference when using a vector of reference_wrapper items

FP: constVariableReference when using a vector of reference_wrapper items

Testing PRs on Debian

AI reviews