Changelog for cppcheck-2.5-bp154.1.87.x86_64.rpm :

* Sun Sep 19 2021 Christophe Giboudeaux - Add glibc 2.34 build fix:
* 0001-Fix-compilation-with-recent-glibc-where-SIGSTKSZ-is-.patch
* Sat Jul 17 2021 Dirk Müller - update to 2.5:
* checked that all features in c++11, c++14, c++17 are supported
* c++20 support is improved but not complete yet
* improved library files, better knowledge about APIs
* improved checks to detect more bugs
* fixed checks to avoid unwanted warnings
* suspicious container/iterator assignment in condition
* rethrow without current handled exception- drop 0002-Another-gcc11-fix-3179.patch, 0001-Fix-gcc11-build-errors.patch: upstream
* Tue Jun 01 2021 Christophe Giboudeaux - Add GCC compatibility fixes:
* 0001-Fix-gcc11-build-errors.patch
* 0002-Another-gcc11-fix-3179.patch
* Mon May 10 2021 Stephan Kulow - add fix-i586.patch to fix compilation on i586, where the test case tests the wrong IntRange
* Wed Mar 24 2021 Dirk Müller - update to 2.4.1:
* fix for windows installer, no other changes
* Mon Mar 22 2021 Dirk Müller - update to 2.4:
* Detect one definition rule violations
* MISRA improvements
* ImportProject fixes
* Various bug hunting improvements
* Fixes when importing AST from clang
* Sat Dec 12 2020 Milan Savić - Update to version 2.3 Improved C++ parser:
* types
* wrong operands in ast
* better simplification of templates Improved clang import, various fixes. Improved value flow analysis Fixed false positives Improved configuration in library files
* boost.cfg
* googletest.cfg
* qt.cfg
* windows.cfg
* wxwidgets.cfg Added several Misra rules:
* 6.1
* 6.2
* 7.2
* 7.4
* 9.2
* 10.2
* 15.4 Added platforms:
* elbrus e1c+
* pic
* pic8
* mips- Update to version 2.2 New checks:
* incorrect usage of mutexes and lock guards
* Dereference end iterator
* Iterating a known empty container
* outOfBounds check for iterators to containers Removed \'operator=\' check that ensures reference to self is returned. That is not about safety. Improved parser
* various ast fixes Clang parser
* The Clang import feature in Cppcheck should be considered to be experimental for now. There are problems. Improved bug hunting
* variable constraints
* handling of multidimension arrays
* function calls, execute functions that are in same TU
* improved handling of containers
* several improvements for uninitialized variables check
* improved analysis of for loops
* added a hash value for warnings that can be used for suppressions Improved data flow
* one more heuristic for ternary operators
* improved data flow for containers CLI:
* Fixed some addon execution problems when there are spaces etc GUI:
* Fix handling of tags
* Exclude files cppcheck-htmlreport:
* several result files can be combined into 1 output Suppressions:
* comments can be added at end of suppression in suppressions file
* Mon Jul 13 2020 Matthias Eliasson - Update to version 2.1
* We have tweaked build scripts.
* When you use USE_Z3=yes, we will handle new versions of z3 better. If you have an old z3 library and get compilation problems you will need to add a z3_version.h in externals.
* The cmake scripts was updated.
* There was a couple of bug fixes. New check:
* for \"expression % 1\" the result is always 0.- Run spec-cleaner
* Remove rpm groups- Enable Z3 build flag
* Thu Mar 12 2020 Vladislav Savic - Since cppcheck version 1.89 CFGDIR is replaced by FILESDIR and cfg files are no longer kept in FILESDIR but in subfolder FILESDIR/cfg.
* Wed Mar 04 2020 Martin Pluskal - Use cmake macros
* Wed Mar 04 2020 Danny Al-Gaaf - Update to version 1.90
* alias to vector element invalid after vector is changed
* improved value flow analysis for struct members
* improved value flow analysis for pointer alias
* CERT: Added ENV33-C: Do not call system()
* MISRA: added rules 2.7, 3.2, 4.2, 14.2, 21.1, 21.12- update to version 1.89
* The default warning message format was changed. The new format is similar to GCC. If you want to get warnings in the old format, add --template=cppcheck1 to the command line.
* improved value flow analysis for pointer aliases
* improved checking for uninitialized variables/structs
* better checking of smart pointers
* better checking of global variables
* Added Cppcheck annotations cppcheck_low(VALUE) and cppcheck_high(VALUE)
* shadow variables; warn when argument is shadowed
* warn if local reference variable can be const
* Added API01-C: Avoid laying out strings in memory directly before sensitive data
* Added MSC24-C: Do not use deprecated or obsolescent functions
* Added STR11-C: Do not specify the bound of a character array initialized with a string literal
* MISRA: added rules 17.2, 18.4, 18.7
* Mon Jul 01 2019 Martin Liška - Update to version 1.88:
* Comparing pointers that point to different objects
* Address of local variable \'x\' is accessed at non-zero index
* STL usage: unnecessary search before insertion
* Duplicate expression for condition and assignment: if (x==3) x=3;
* Better handling of C++14 and C++17
* New command line option --addon used to run addons directly from Cppcheck.
* Some advanced options are only available in GUI:- Update to version 1.87:
* --project can now import Cppcheck GUI projects.
* Condition is always true when array address is compared with 0.
* function argument expression calculation has known result (#8830)
* Better lifetime checking (using pointer/reference that points at deleted object)
* Improved whole program analysis
* Better handling of language extension varAATTaddress.
* Many improvements in parser to handle templates, type aliases, etc better
* New addon for checking naming conventions. Naming conventions are configured in json file.
* Thu Jan 03 2019 Nemanja V - Workaround for CMake lacking a CFGDIR variable.
* Patch was submitted (https://github.com/danmar/cppcheck/pull/1554) and accepted so this change should be reverted and replaced with a CMake compile definition - DCFGDIR=\\\"%{_datadir}/%{name}\\\" once a new upstream version is released.
* Thu Dec 27 2018 Martin Pluskal - Small packaging enhancements
* Thu Dec 20 2018 Christoph G - Use Python 3 instad of Python 2- Switch to CMake as the used build system, otherwise Python 3 could not be detected by plain make
* Wed Dec 19 2018 Christoph G - Update to 1.86
* Many fixes in the template simplifier
* Several fixes in the abstract syntax tree. Checking improvements:
* New check: passing address of char to function that expects a strz
* New check: shadow variables
* Improved lifetime checking
* Improved STL iterators checking
* Improved data flow analysis New libraries:
* zlib
* googletest Addons:
* misra.py: Fixes for suppressions and exclusions
* namingng.py: New addon to check naming conventions. Rules are specified in json file.
* Thu Oct 18 2018 mvetterAATTsuse.com- Update to 1.85: Changes from 1.83: Command line: - fixes in parser - Improved loading of platform files. GUI: - few minor improvements in user interface - Code preview - Added MISRA addon integration - Platform can be selected in project settings - Fixed issue when loading xml results file Addons: - We are now officially releasing our MISRA addon. So far it supports MISRA C 2012. Changes from 1.85: General: - We are modernizing the Cppcheck code. Support for MSVC 2010 and GCC 4.4 is dropped. You now need a compiler that is at least as good as MSVC 2013 or GCC 4.6. Checking improvements: - New check: Suggest STL algorithms instead of hard-coded for loops - New check: Warn about ineffective algorithms (same iterator passed) - New check: Mismatching iterators used together in operators - Container (STL/Qt/WxWidgets/etc) access out of bounds - Improved the checkers that warns about same/opposite expressions, track variable values better. - Variable scope: warn about references also Graphical user interface: - You can specify undefines in the project file dialog - Fixed configuration of suppressions - Windows: Fixed issue of wrong/no theme being applied to UI elements Misra: - support per file excludes from cppcheck - support per file suppressions from cppcheck - summary will now summarize results for all files again - a few false positives were fixed
* Sun Feb 18 2018 aloisioAATTgmx.com- Update to version 1.82 Bug fixes:
* Better handling of namespaces
* Fixed false positives
* Fixed parsing of compile databases
* Fixed parsing of visual studio projects Enhancements
* New check; Detect mistakes when there are multiple strcmp() in condition Example: if (strcmp(password,\"A\")==0 || strcmp(password,\"B\")==0 || strcmp(password,\"C\")) There is a missing \'==0\', and therefore this condition is always true except when password is \"C\".
* New check; pointer calculation result can\'t be NULL unless there is overflow Example: someType
*
*list_p = ...; if ((list_p + 1) == NULL) The result for \'(list_p + 1)\' can\'t be NULL unless there is overflow (UB).
* New check; public interface of classes should be safe - detect possible division by zero Example: class Fred { public: void setValue(int mul, int div) { value = mul / div; // <- unsafe } ... This check does not consider how Fred::setValue() is really called. If you agree that the public interface of classes should always be safe; it should be allowed to call all public methods with arbitrary arguments, then this checker will be useful.
* Fixed a few false negatives
* More information in the cfg files version 1.81 CPPCHECK:
* New warning: Check if condition after an early return is overlapping and therefore always false.
* Improved knowledge about C/C++ standard, windows, posix, wxwidgets, gnu
* Better handling of Visual Studio projects GUI:
* Compile: Qt5 is now needed to build the GUI
* Compile: New qmake flag HAVE_QCHART
* Project: You can now run cppcheck-addons
* Project: We have integrated clang-tidy
* Results view: Reload last results (if cppcheck build dir is used) when GUI is started
* Results view: Tag the warnings with custom keywords (bug/todo/not important/etc..)
* Results view: Shows when warning first appeared (since date)
* Results view: Suppress warnings through right-click menu
* Statistics: Added charts (shown if Qt charts module is enabled during build) version 1.80 Checking improvements:
* Added platform for Atmel AVR 8 bit microcontrollers (avr8)
* Better \'callstacks\' in cppcheck messages
* Improved gnu.cfg, posix.cfg, wxwidgets.cfg and std.cfg, added motif.cfg
* Various improvements to AST, ValueFlow analysis and template parsing Command line changes:
* Deprecated command line argument
*-append has been removed
* New command line argument
*-plist-output to create .plist files
* New command line argument
*-output-file to print output to file directly
* Check OpenCL files (.cl) GUI:
* Support export of statistics to PDF
* Several small usability improvements
* Additionally, lots of false positives and bugs have been fixed and several existing checks have been improved. version 1.79 General changes:
* C++ code in C files is rejected now (use
*-language=c++ to enforce checking the code as C++)
* Write function access type to XML dump Checking improvements:
* Improved configuration extraction in preprocessor
* Improved accuracy of AST
* Improved template parsing
* Improved support for (STL) containers in SymbolDatabase
* Improved support for C++11\'s \'auto\' type
* Experimental support for uninitialized variables in ValueFlow analysis
* Added qt.cfg and sfml.cfg, improved several existing .cfg files GUI:
* Use CFGDIR macro
* Additionally, lots of false positives and bugs have been fixed and several existing checks have been improved. version 1.78 General changes:
* Reduced memory usage by up to 10% by reducing size of token list New checks:
* Mismatching argument names between function declaration and definition
* Detect classes which have a copy constructor but no copy operator and vice versa Checking improvements:
* Improved matching of overloaded functions
* Improved ValueType analysis, especially related to allocations with \"new\" and C++11\'s \"auto\"
* Improved support for C++11 brace initialization
* Improved ValueFlow analysis
* Improved template parsing
* Improved detection of memory leaks
* Improved nullpointer checking when nullptr and NULL are used
* Detect array out of bounds across compilation units
* Extended windows.cfg, posix.cfg and std.cfg
* Additionally, lots of false positives and bugs have been fixed and several existing checks have been improved.
* Tue Mar 21 2017 mpluskalAATTsuse.com- Use qmake macros- Run spec-cleaner
* Tue Mar 21 2017 fvogtAATTsuse.com- Update to version 1.77:
* Added flag --cppcheck-build-dir to allow incremental analysis and inter-file checking
* Improved --project support for Visual Studio solutions
* Detect pointer overflow
* Detect usage of variable after std::move or std::forward
* Warn about number and char literals in boolean expressions
* Improved checking for variables modified but not used again
* Libraries: Added support to specify
* Improved ValueFlow, especially related to function return values and casts
* Improved simplification of Null values to allow more accurate checking
* Several improvements to windows.cfg, posix.cfg, gnu.cfg and std.cfg
* Reimplemented check for using iterators of mismatching containers... read more- Always build Qt5 GUI
* Sat Feb 20 2016 crrodriguezAATTopensuse.org- Build the GUI against QT5 in newish products.
* Tue Sep 15 2015 Adam Mizerski - update to 1.70
* General changes: - New version of .cfg file format, adding support for namespaces and declaring several functions at once - Support building x64 installer for Windows; Both x64 and x86 builds are now provided - Warn about deprecated options --suppressions and - -exitcode-suppressions. They will be removed in future - Added debugging option --debug-normal, which prints out debug output before second stage simplification
* New checks: - Warn about modifying string literals - Detect declaration of variable length arrays with negative size - Warn about implicit type conversion from int to long - Warn about redundant code in conditions like (y || (!y && z)) - Detect conditions with known result - Race condition: non-interlocked access after InterlockedDecrement() - Detect unused \'goto\' labels
* Removed checks: - Do no longer warn about a bug in scanf implementation of ancient glibc versions - Multifile analysis (added in 1.69) has been removed because it did not work - Removed ExecutionPath checker, which has been superseeded by ValueFlow analysis
* Improvements: - Support hexadecimal floating point numbers (C99) - Support [[deprecated]] (C++14) - Improved handling of sizeof() - Improved handling of reserved keywords - Better handling of C declaration specifiers; support complex/_Complex (C99) - Better handling of ternary operator in ValueFlow analysis - Lots of improvements to .cfg files, especially std.cfg, which now supports namespace std - Improved performance and memory usage of Preprocessor - Improved performance of matchcompiler - Reduced Disk IO when ignoring paths - Removed several obsolete simplifications - Added python addons: naming.py, threadsafety.py and cert.py
* GUI: - Support printing - Added item \"Open containing folder\" to context menu
* Additionally, lots of false positives and bugs have been fixed and several existing checks have been improved.
* Fri May 15 2015 Adam Mizerski - update do 1.69
* General changes: - Added flag --platform=native, when it is used type sizes and behaviour of host system are used - Backward compatibility for Libary files is now working. Future cppcheck versions will be able to use libraries written for previous versions - Windows 32 bit builds now set /LARGEADDRESSAWARE, so that they can use up to 4 GiB
* New checks: - Detect bad bitmask checks (usage of | where & should be used) - Suggest usage of \"explicit\" for constructors with a single parameter - Suggest usage of make_shared/make_unique - Warn about usage of malloc with auto_ptr - Detect redundant pointer operations like &
*ptr
* Improvements: - Support std::array (C++11) - Detect same expressions in both branches of a ternary operator - New -tags in libraries to configure STL (and similar) container types - Several improvements to ValueFlow analysis (for example support for default function arguments) - Improved buffer overrun and memory leak checking - Removed a bunch of redundant checking code - Removed several simplifications - Stronger matching of library functions - Lots of additions to std.cfg and posix.cfg - New library for Microsoft SAL (microsoft_sal.cfg) - Improved C++11 template parsing (\">>\" as closing brackets, variadic templates) - Added statistics to htmlreport
* GUI: - Fixed language selection
* Thu Jan 08 2015 danny.al-gaafAATTbisect.de- update to 1.68:
* New checks: - Multifile checking for buffer overruns and uninitialized variables
* Improvements: - Libraries are now able to contain platform specific types - Improved handling of function overloads - Improved handling of integer literal suffixes - Improved stability of template parsing - Improved accuracy of ValueFlow analysis - Improved checking of pointer overflow - Support noexcept(false) - Support __attribute__((noreturn)) - A bunch of additions to several Libraries, especially posix.cfg and qt.cfg
* Additionally, lots of false positives and bugs have been fixed and several existing checks have been improved.
* Wed Oct 22 2014 danny.al-gaafAATTbisect.de- update to 1.67:
* General changes: - Library files have now a \'format\' attribute. Format version 1 is assumed by default - Cppcheck does no longer abort checking if unhandled characters (Non-ASCII) are found
* New checks: - Check for unused return values - Detect shift by too many bits, signed integer overflow and dangerous sign conversion - Recommend usage of expm1(), log1p(), erfc() - Division by sizeof() as parameter to memset/memcpy/ memmove/etc. as they expect a size in bytes - Several new va_arg related checks: - - Wrong parameter passed to va_start() - - Reference passed to va_start() - - Missing va_end() - - Using va_list before it is opened - - Subsequent calls to va_start/va_copy() - Initialization by itself in initializer list - Dead pointer usage when pointer alias local variable that has gone out of scope
* Improvements: - Support uniform initialization syntax (C++11) - Much improvements to value flow analysis - Improved AST creation (support placement new, C++-style casts, templates, operator new[], ...) - Improved lambda support - Support GCC extension __attriute__((used)) and MSVC extension __declspec(property) - Better support for static member variables, inherited variables and namespaces - Improved typedef support where multiple variables are declared at once - Avoid checking code multiple times by calculating a checksum. Duplicate preprocessor configurations are eliminated by this. - Support C++03/C \'auto\' keyword - HTML report: display \'verbose\' message using clickable expandable divs
* Additionally, lots of false positives and bugs have been fixed and several existing checks have been improved.