summaryrefslogtreecommitdiff
path: root/devel/cppcheck/Makefile
AgeCommit message (Collapse)AuthorFilesLines
2022-11-23massive revision bump after textproc/icu updateadam1-2/+2
2022-09-11*: bump PKGREVISION for flac shlib bumpwiz1-1/+2
2022-08-22cppcheck: update to 2.8markd1-3/+2
Cppcheck-2.8 * Lifetime analysis can now track lifetime across user-defined constructors when they are inline and using member initializer list. * SymbolDatabase can now deduce iterator types from how they are specified in the library files. * ValueFlow can evaluate class member functions that return known values. * Improve duplicateValueTenary to not warn when used as an lvalue or when one branch has side effects * Fix variableScope to not warn when variables are used in lambda functions * Fix unassignedVariable warnings when using structured bindings * Fix redundantInitialization warning when variable is used in a lambda * Fix variableScope warnings when using if/while init-statement * Improve lifetime analysis when returning variadic template expressions * Detect more statements with constStatement * Detect variableScope for more types * Improvements to unreadVariable * Detect more instances of C style casts * Warn if the return value of new is discarded * The pre-ValueFlow uninitialized checker now uses a different ID as legacyUninitvar * Extended library format to exclude specific function argument values Cppcheck-2.7 * Add support for container views. * Various checker improvements. * Fixed false positives. Cppcheck-2.6 * Color output for diagnostics are added for unix-based platforms. * Added symbolic analysis for ValueFlow. A simple delta is used to compute the difference between two unknown variable. * Rules using the "define" tokenlist can also match #include as well. * Library <function> tags can now use <container> tag, so free functions that accept containers such as std::size, std::empty, std::begin, std::end, etc. can specify the yields or action for the container. * Library <smart-pointer> tag can specify a <unique> tag for smart pointers that have unique ownership. * Fixed problems when --cppcheck-build-dir is used, that should now work better. * htmlreport can now output author information (using git blame) * More warnings about variables that is not const but can be const
2022-07-02*: Recursive revbump from audio/pulseaudioryoon1-2/+2
2022-06-30*: Revbump packages that use Python at runtime without a PKGNAME prefixnia1-2/+2
2022-04-18revbump for textproc/icu updateadam1-2/+2
2022-03-28{c,d,e}*/*: revbump(1) for libsndfiletnn1-2/+2
2021-12-08revbump for icu and libffiadam1-2/+2
2021-11-15*: recursive bump for gstreamer 1.18.5wiz1-2/+2
2021-07-30*: Recursive revbump from audio/pulseaudio-15.0ryoon1-2/+2
2021-04-21revbump for textproc/icuadam1-2/+2
2021-04-06use versioned py-pygemntsadam1-3/+5
2021-02-07*: Recursive revbump from audio/pulseaudio-14.2.nb1ryoon1-2/+2
2021-01-01*: Recursive revbump from audio/pulseaudio-14.0ryoon1-2/+2
2020-12-04Revbump packages with a runtime Python dep but no version prefix.nia1-2/+2
For the Python 3.8 default switch.
2020-11-05*: Recursive revbump from textproc/icu-68.1ryoon1-2/+2
2020-08-18*: revbump for libsndfileleot1-2/+2
2020-08-17*: revbump after fontconfig bl3 changes (libuuid removal)leot1-1/+2
2020-06-29cppcheck: update to 2.1.wiz1-4/+12
2.1 This is a minor release. We have tweaked build scripts. * When you use USE_Z3=yes, we will handle new versions of z3 better. If you have an old z3 library and get compilation problems you will need to add a z3_version.h in externals. * The cmake scripts were updated. There was a couple of bug fixes. New check: * for "expression % 1" the result is always 0. 2.0 Overview The command line is not changed drastically. Your old cppcheck scripts should work as before. Compiling: There is a new dependency Z3. When compiling with the Makefile it is highly recommended to use "USE_Z3=yes". Improved clang-tidy integration Several fixes to; improve parsing detect more bugs with existing checks fix false alarms Clang import Clang is a C/C++ compiler that has a very robust and well made parser. Cppcheck will always use its internal parser by default. However there is now an option to use the Clang parser instead. It is recommended that you use the default internal Cppcheck parser unless you notice that it fails to parse your code properly (syntax errors, strange false alarms). Bug hunting There is a new "soundy" analysis in Cppcheck that should detect most bugs. You should expect false alarms, however the false alarms will not be overwhelming. This new "soundy" analysis is not intended to replace normal Cppcheck analysis. There are use cases where false alarms can not be tolerated. We have added 1 checker and that checks for division by zero: It detects all "integer division by zero" bugs in the Juliet test suite. It detects all "division by zero" bugs in the ITC test suite. There was 28 division by zero CVEs published in 2019 for C/C++ open source projects, and we could quickly see that 21 of the bugs are found by Cppcheck. There is no CVE bug that we know Cppcheck fails to diagnose. But there are 7 CVEs that would require additional investigation to establish if it is really detected or not. You can read more about this analysis in the "Bug hunting" chapter in the manual.
2020-06-23cppcheck: update to 1.90nb2.wiz1-11/+2
The tinyxml2 override (to use the pkgsrc version) stopped working. Having both the pkgsrc version and the included copy used in the build made cppcheck dump core. Stop using the pkgsrc version since patching the build system to avoid using the included copy is a lot of effort.
2020-06-02Revbump for icuadam1-1/+2
2020-04-16cppcheck: update to 1.90.wiz1-10/+8
Based on wip/cppcheck by Apurva Nandan. Cppcheck-1.90 has been released. New check: * alias to vector element invalid after vector is changed Improved checking: * improved value flow analysis for struct members * improved value flow analysis for pointer alias CERT: * Added ENV33-C: Do not call system() MISRA: * Added rule 2.7 * Added rule 3.2 * Added rule 4.2 * Added rule 14.2 * Added rule 21.1 * Added rule 21.12 Addons: * Add --recursive option. You can check dump files recursively.
2020-04-12Recursive revision bump after textproc/icu updateadam1-2/+2
2020-03-10librsvg: update bl3.mk to remove libcroco in rust casewiz1-2/+2
recursive bump for the dependency change
2020-03-08*: recursive bump for libffiwiz1-2/+2
2020-01-26all: migrate some SourceForge homepage URLs back from https to httprillig1-2/+2
https://mail-index.netbsd.org/pkgsrc-changes/2020/01/18/msg205146.html In the above commit, the homepage URLs were migrated from http to https, assuming that SourceForge would use the same host names for both http and https connections. This assumption was wrong. Their documentation at https://sourceforge.net/p/forge/documentation/Custom%20VHOSTs/ states that the https URLs use the domain sourceforge.io instead. To make the homepages from the above commit reachable again, pkglint has been extended to check for reachable homepages. This check is only enabled when the --network command line option is given. Each of the homepages that referred to https://$project.sourceforge.net before was migrated to https://$project.sourceforge.io (27), and if that was not reachable, to the fallback URL http://$project.sourceforge.net (163).
2020-01-18all: migrate several HOMEPAGEs to httpsrillig1-2/+2
pkglint --only "https instead of http" -r -F With manual adjustments afterwards since pkglint 19.4.4 fixed a few indentations in unrelated lines. This mainly affects projects hosted at SourceForce, as well as freedesktop.org, CTAN and GNU.
2020-01-18*: Recursive revision bump for openssl 1.1.1.jperkin1-2/+2
2019-09-18Recursive revbump from audio/pulseaudioryoon1-2/+2
2019-04-25PKGREVISION bump for anything using python without a PYPKGPREFIX.maya1-2/+2
This is a semi-manual PKGREVISION bump.
2019-04-03Recursive revbump from textproc/icuryoon1-2/+2
2018-12-09revbump after updating textproc/icuadam1-2/+2
2018-11-12Recursive revbump from hardbuzz-2.1.1ryoon1-2/+2
2018-07-20Recursive revbump from textproc/icu-62.1ryoon1-2/+2
2018-07-06Recursive revbump from audio/pulseaudioryoon1-2/+2
2018-04-14revbump after icu updateadam1-2/+2
2018-03-12Recursive bumps for fontconfig and libzip dependency changes.wiz1-2/+2
2018-01-28Bump PKGREVISION for gdbm shlib major bumpwiz1-2/+2
2017-11-30Revbump after textproc/icu updateadam1-2/+2
2017-09-18revbump for requiring ICU 59.xmaya1-2/+2
2017-09-12recursive bump for qt5-qtwebkit dependency changewiz1-2/+2
2017-09-08Recursive revbump from audio/pulseaudio-11.0ryoon1-2/+2
2017-05-03Convert CXXFLAGS setting C++ standard to USE_LANGUAGES.jperkin1-5/+2
2017-04-22Revbump after icu updateadam1-2/+2
2017-02-28Recursive revbump from graphics/libwebpryoon1-2/+2
2017-02-12Recursive revbump from fonts/harfbuzzryoon1-2/+2
2017-02-06Recursive bump for harfbuzz's new graphite2 dependency.wiz1-2/+2
2017-01-21Recursive revbump from audio/pulseaudio-10.0ryoon1-2/+2
2016-12-04Recursive revbump from textproc/icu 58.1ryoon1-1/+2
2016-10-25Update cppcheck from 1.75 to 1.76.1kamil1-2/+2
Upstream changelog ================== Cppcheck-1.76.1 has been released. It has a bugfix to avoid hang. Cppcheck-1.76 has been released. General changes: - Completed CWE mapping - Support opening project files of external build systems, including CMake and Visual Studio (CLI: --project) - XML format version 1 is deprecated and will be removed in 1.81 Removed checks: New checks: Checking improvements: - Improved checking for conditions that are always true/false - Improved format string checking: Support more functions, support %h and %hh - Improved std.cfg, windows.cfg and qt.cfg; added wxwidgets.cfg - Improved ValueFlow analysis - Improved SymbolDatabase accuracy - Improved Preprocessor (simplecpp) - Support base class methods in Library GUI: - Support opening project files from GUI - Added .desktop file Additionally, lots of false positives and bugs have been fixed and several existing checks have been improved.
generated by cgit v1.2.3 (git 2.46.0) at 2026-07-08 16:44:43 +0000