- update to 2.13.4:
  * Speedup premium misra checking

• Files Changed
• Browse Source

- update to 2.13.3:
  * settings.cpp: Update autosar+cert+misra checkers mappings
  * Fix #12389 (GUI: premiumaddon is not executed properly anymore)

• Files Changed
• Browse Source

- update to 2.13.2:
  * Fix premium version check
  * Fix 12375

• Files Changed
• Browse Source

- update to 2.13.1:
 * Show premium autosar/misra/cert style issues even if --enable
   is not used
 * Better validation of --premium options
 * unsafe handling of unconditional #error
 * unsafe suppressions of critical errors
 * missing "misra-config" warning, calling unknown function in
   condition
 * If --premium=safety is used then go to "safety mode". Do not
   override this in cppcheck.cfg

• Files Changed
• Browse Source

- update to 2.13.0
  * newCheck passedByValueCallback for functions which take a
    parameter by value but are used as callbacks
  * newCheck returnImplicitInt for C functions without return type
  * newCheck iterateByValue for iterating by value in a range-based
    for loop when a const reference could be used
- Drop patches werror-return-type.patch, eb076d87.patch, and
  CVE-2023-39070.patch which are part of upstream or fixed in a
  similar way.

• Files Changed
• Browse Source

- add CVE-2023-39070.patch (CVE-2023-39070, bsc#1215233)

• Files Changed
• Browse Source

- Replace disable-some-tests-about-char-signedness.patch with
  upstream patch to fix tests on non-x86_64 (such as aarch64):
  * eb076d87.patch

• Files Changed
• Browse Source

- update to 2.12.1:
  * Support importing projects with project-name

- update to 2.12.0:
  * uselessOverride finds overriding functions that either
    duplicate code from or delegate back to the base class
    implementation
  * knownPointerToBool finds pointer to bool conversions that are
    always true or false
  * truncLongCastAssignment and truncLongCastReturn check
    additional types, including float/double/long double
  * duplInheritedMember also reports duplicated member functions
  * constParameter*/constVariable* checks find more instances of
    pointers/references that can be const, e.g. when calling
    library functions
  * Write how many checkers was activated after a run
  * Added --checkers-report that can be used to generate a report
    in a file that shows what checkers was activated and disabled
  * The qmake build system has been deprecated and will be
    removed in a future version.
  * Command-line option '--template
- update to 2.11:
  * pop_back on empty container is UB
  * Improve useStlAlgorithm check to handle many more conditions
    in the loop for any_of, all_of and none_of algorithms
  * ValueFlow can evaluate the return value of functions even
    when conditionals are used
  * ValueFlow will now forward the container sizes being returned
    from a function
  * ValueFlow can infer possible values from possible symbolic

• Files Changed
• Browse Source

• Files Changed
• Browse Source

- switch on Tumbleweed temporarily to gcc 12 to avoid
  "allocator_traits<A>::rebind_alloc<A::value_type> must be A"
  (as mentioned on https://gcc.gnu.org/gcc-13/porting_to.html)

• Files Changed
• Browse Source

• Files Changed
• Browse Source

Automatic submission by obs-autosubmit

• Files Changed
• Browse Source

• Files Changed
• Browse Source

Automatic submission by obs-autosubmit

• Files Changed
• Browse Source

- update to 2.9:
  * restored check for negative allocation (new[]) and negative VLA sizes from
    cppcheck 1.87 (LCppC backport)
  * replaced hardcoded check for pipe() buffer size by library configuration
    option (LCppC backport)
  * on Windows the callstack is now being written to the output specific via
    "--exception-handling"
  * make it possible to disable the various exception handling parts via the
    CMake options "NO_UNIX_SIGNAL_HANDLING", "NO_UNIX_BACKTRACE_SUPPORT" and
    "NO_WINDOWS_SEH"
  * detect more redundant calls of std::string::c_str(), std::string::substr(),
    and unnecessary copies of containers
  * Add a match function to addon similiar to Token::Match used internally by
    cppcheck:
  * | for either-or tokens(ie struct|class to match either struct or class)
  * !! to negate a token
  * It supports the %any%, %assign%, %comp%, %name%, %op%, %or%, %oror%, and %var% keywords
  * It supports (*), {*}, [*], and <*> to match links
  * @ can be added to bind the token to a name
  * ** can be used to match until a token
  * Add math functions which can be used in library function definition. This
    enables evaluation of more math functions in ValueFlow
  * Further improve lifetime analysis with this pointers
  * Propagate condition values from outer function calls
  * Add debug intrinsics debug_valueflow and debug_valuetype to show more
    detail including source backtraces

• Files Changed
• Browse Source

- update to 2.8.2:
  * do not allocate std::string when column is -1
  * catch internal error during whole program analysis
  * fix whole program analysis

• Files Changed
• Browse Source

- update to 2.8:
  * Lifetime analysis can now track lifetime across user-defined constructors
    when they are inline and using member initializer list.
  * SymbolDatabase can now deduce iterator types from how they are specified in
    the library files.
  * ValueFlow can evaluate class member functions that return known values.
  * Improve duplicateValueTenary to not warn when used as an lvalue or when one
    branch has side effects
  * Fix variableScope to not warn when variables are used in lambda functions
  * Fix unassignedVariable warnings when using structured bindings
  * Fix redundantInitialization warning when variable is used in a lambda
  * Fix variableScope warnings when using if/while init-statement
  * Improve lifetime analysis when returning variadic template expressions
  * Detect more statements with constStatement
  * Detect variableScope for more types
  * Improvements to unreadVariable
  * Detect more instances of C style casts
  * Warn if the return value of new is discarded
  * The pre-ValueFlow uninitialized checker now uses a different ID as legacyUninitvar
  * Extended library format to exclude specific function argument values

• Files Changed
• Browse Source

- update to 2.7.5:
  * Import Project: Fix problem with define value with space

• Files Changed
• Browse Source

- update to 2.7.4:
  * Fixes "undefined reference to `tinyxml2::"
  * Replace tinyxml2_LIBRARY with tinyxml2_LIBRARIES

• Files Changed
• Browse Source

- update to 2.7.1:
  * Add support for container views. The view attribute has been added to the
    <container> library tag to specify the class is a view. The lifetime
    analysis has been updated to use this new attribute to find dangling
    lifetime containers.
  * Various checker improvements.
  * Fixed false positives.
- drop fix-i586.patch (obsolete)

• Files Changed
• Browse Source