CWE Checker

Static source code analysis tool for C and C++ code

Brought to you by: danielmarjamaki

CWE Checker

Forum: General Discussion

Creator: Raphael de Carvalho Muniz

Created: 2017-02-01

Updated: 2017-02-01

Raphael de Carvalho Muniz - 2017-02-01

Hi everybody,

I need that the CppCheck find occurrences of CWE in C files. Do you know whether he is able to find this?

I am using this parameter: "cppcheck --force --enable=all --xml-version=2 file.c"

But he doesn't report CWE occurrences in files that I'm analyzing.

Can someone help me?

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Raphael de Carvalho Muniz - 2017-02-02

Someone can suggest me one tool of static analyze of C code that reports CWE?
I can't make it with CppCheck.

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Alexander Mai - 2017-02-02

cppcheck 1.77 has CWE mapping for all messages.
What version do you use?
Does it show any messages for your source code?

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
- Raphael de Carvalho Muniz - 2017-02-03
  
  Good morning Alexander,
  Thanks for your answer.
  
  I'm using the 1.72 version of CppCheck for Ubuntu 64 bits.
  
  "Does it show any messages to your source code?"
  Yes! I'm using this parameter: cppcheck --force --enable=all --xml-version=2 file.c
  
  Is there any additional configuration that I can make to it show CWE messages.
  
  If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Mr. X - 2017-02-03

1.72 does not support CWE afaik. You should update to the latest cppcheck version.

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Log in to post a comment.