[cppcheck] Dangerous usage of strncat in file xf86AutoConfig.c
dickey at his.com
Sat Oct 3 06:07:58 PDT 2009
On Sat, 3 Oct 2009, David Gerard wrote:
> 2009/10/3 Thomas Dickey <dickey at his.com>:
>> It's possible, but cppcheck isn't that smart.
> Interesting to note: Wine is being run through cppcheck after every
> two-weekly release as well. It's showing up occasional bugs and
> questionable coding in wine, but mostly bugs in cppcheck ;-)
yes (I've run it a few times, found no bugs in the target code, but have
appeased it in a few cases - the equivalent of using a void cast to quiet
gcc or lint).
> I suggest running the whole server code base through cppcheck, seeing
> what it comes up with then going through very carefully to work out
> what's a bug in Xorg code and what's actually a bug in cppcheck.
> Probably a lot of the latter still.
mostly its usefulness seems to be to force someone to reread the code
> That said, it has usefully spotted bad stuff in wine. Just very
> noisily. It'll probably manage at least as well on a codebase as large
> and old as X11.
> - d.
> xorg-devel mailing list
> xorg-devel at lists.x.org
Thomas E. Dickey
More information about the xorg-devel