Generated: 2026-10-15
Safety Security Cosmetic Major Critical
| Issue | Title | Labels | Severity | Fix versions | Status |
|---|---|---|---|---|---|
| ADDON-12 | Cert FN: INT30/INT31 (github #146) | SafetySecurity | Major | 25.8.0 | Released |
| ADDON-13 | false negative: misra-c2012-13.2, same variable used in expression and passed by address to function (github #357) | SafetySecurity | Major | 25.8.0 | Released |
| ADDON-14 | Limit Misra C to C files (github #599) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-15 | False positive: Misra C++ 2023 19.1.3: after 'defined' check (github #980) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-17 | False positive: Misra C++ 0.2.3: using statement (github #1420) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-18 | False positive: Misra C++ 28.6.1: std::move(*this) in r-value ref qualified method (github #1422) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-19 | False positive: Cert C ERR33: strchr in loop (github #1424) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-20 | False positive: Cert C INT30: cast uint32_t to uint64_t (github #1425) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-21 | False positive: cert err33: function result is checked with ternary operator (github #1431) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-22 | False positive: Cert err33: checked by while loop condition (github #1432) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-23 | False positive: Cert ERR33: getenv() called in ternary (github #1433) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-24 | False positive: CERT ERR33: Function call (github #1434) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-25 | False positive: CERT INT36: array initialization (github #1449) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-26 | False positive: CERT INT36: (u)intptr_t to pointer cast (github #1450) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-27 | False positive: CERT EXP39: should not apply at a cast to a character type (github #1451) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-28 | False positive: CERT DCL39: memset handling (github #1452) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-29 | False positive: infinite loop (more than one loop variable) (github #589) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-30 | False Positive: Use after free (github #1112) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-31 | False positive: comparison of std::array objects results in premium-arrayPointerComparison (github #1132) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-32 | False positive: Misra C++ 2023 7.0.6: template argument assigned to variable with same type (github #1133) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-33 | False positive: unusedMember reported for constant used as template parameter (github #1230) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-34 | False positive: Misra C 13.1: function with const attribute does not have persistent side effects (github #1301) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-46 | Mapping integerOverflow to CERT INT32 (github #1348) | SafetySecurity | Major | 25.8.0 | Released |
| ADDON-53 | False positive: Misra C++ 2023 19.3.3: macros used inside the macro (github #1307) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-63 | Add script that can generate a errorlist.json file (github #1236) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-68 | False positive: Misra C 16.3: fallthrough attribute (github #1284) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-71 | False positive: Cert C INT31: Exception about ((unsigned)-1) (github #1032) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-72 | Clarify Misra C 10.x warnings, display essential type categories for expressions (github #1120) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-73 | False negative: EXP34-C: dereferencing unchecked pointer (github #1124) | SafetySecurity | Major | 25.8.0 | Released |
| ADDON-74 | False negative: CERT-C: ARR30-C: bug for multidimensional arrays (github #1129) | SafetySecurity | Major | 25.8.0 | Released |
| ADDON-75 | False positive: Cert INT30-C: 'U32MAX - u32' will not wrap (github #1150) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-76 | False positive: Misra C 9.6: foo = { .bar=bar } (github #1162) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-77 | PRE13-C. Use the Standard predefined macros to test for versions and features. (github #1201) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-78 | False positive: Misra C 2023: 21.18: warn on bit fields (github #1222) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-79 | Clarify Misra C++ 2023 4.1.1: what non-conforming feature is detected (github #1227) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-80 | DCL20-C. Explicitly specify void when a function accepts no arguments (github #1237) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-81 | Cert C: EXP20-C. Perform explicit tests to determine success, true and false, and equality (github #1243) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-82 | New check; unbound loop increment of iterator #1249 | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-83 | bughunting: buffer/pointer usage (github #1251) | SafetySecurity | Major | 25.8.0 | Released |
| ADDON-84 | bughunting: pointer arithmetic (github #1253) | SafetySecurity | Major | 25.8.0 | Released |
| ADDON-85 | Bughunting: pointer arithmetic in compound assignment, array index using pointer argument (github #1255) | SafetySecurity | Major | 25.8.0 | Released |
| ADDON-86 | Bughunting: better posix checking (github #1259) | SafetySecurity | Major | 25.8.0 | Released |
| ADDON-87 | FP: Misra C 12.2: impossible value used as possible value (github #1264) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-88 | Cert C: INT17-C. Define integer constants in an implementation-independent manner (github #1267) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-89 | Cert FN: INT31 (github #1270) | SafetySecurity | Major | 25.8.0 | Released |
| ADDON-90 | CI: build macos teamscale package (github #1274) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-91 | release-macos.yml: fix failing build (github #1276) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-92 | Licensing: features, licensed to (github #1278) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-93 | coverage.py: add cert ARR30-C mapping, generate cert reports for 2016/wiki rules, only show premium checkers in misra report (github #1279) | SafetySecurity | Major | 25.8.0 | Released |
| ADDON-94 | run the runformat script (github #1280) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-95 | dumpdata: read c++ attribute [[fallthrough]] (github #1285) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-96 | False positive: Misra C 12.2: warns about impossible value in windows (github #1286) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-97 | False positive: Misra C++ 16.6.1: should not warn about unary + operator (github #1288) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-98 | cyclomatic complexity (github #1289) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-99 | execute runformat to fix formatting. (github #1291) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-100 | dumpdata: when writing a warning in plain text format, only skip last note if msg match (github #1293) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-101 | Misra C: refactor 10.x output to make it more robust (github #1295) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-102 | Refactor getExpressionResultRange (github #1299) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-103 | Add Int64 class that can hold all 64-bit integer values from -2^63 to 2^64-1 (github #1302) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-104 | Rewrite Cert EXP60-CPP checker, it is not executed and does not work well (github #1304) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-105 | Clarification: Misra C++ 2023 19.3.3: show the macro names that are used (github #1308) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-106 | saxreader: fail if file is truncated (github #1310) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-107 | Improve output when SaxReader::InvalidXml is thrown (github #1312) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-108 | CI: Update Cppcheck (fallthrough attribute) (github #1315) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-109 | Mapping: Cert EXP53-CPP also covered by uninitdata, uninitStructMember (github #1321) | SafetySecurity | Major | 25.8.0 | Released |
| ADDON-110 | False positive: Misra C++ 7.0.2: should not warn about r-value reference parameter (github #1325) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-111 | False positive: cert exp45: do not warn about initialization (github #1334) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-112 | coverage.py: reimplemented 20.14 misra c rule is not detected as 'implemented' (github #1371) | SafetySecurity | Major | 25.8.0 | Released |
| ADDON-113 | False positive: Misra C 17.3: posix function syslog (github #1417) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-114 | Add --debug-progress option for troubleshooting hangs in premiumaddon (github #1426) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-115 | check all misra c rules in premiumaddon (github #1317) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-116 | Implement HIS metrics: Return (github #1437) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-117 | Implement HIS metrics: PARAM (github #1439) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-118 | Implement HIS metrics: GOTO (github #1441) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-119 | Implement HIS metrics: CALL (github #1443) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-120 | Implement HIS metrics: LEVEL (github #1445) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-121 | Implement HIS metrics: STMT (github #1447) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-122 | Misra C: we need to implement misra-config warnings | SafetySecurity | Major | 25.8.0 | Released |
| ADDON-125 | False positive: Misra C++ 6.0.3: instantiated template | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-126 | Implement HIS metrics: Path | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-127 | Implement HIS metrics: Calling | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-128 | refactoring; write metrics using picojson | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-129 | False positive: Misra C++ 2023 6.2.4: const object in header | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-130 | False negative: Misra C++ 2008 5-0-4: implicit conversion in function call | SafetySecurity | Major | 25.8.0 | Released |
| ADDON-133 | CI: fix release-windows.yml | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-134 | Create script to create a HIS metrics report | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-135 | Move win_installer to addon repo | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-136 | Add compliance-report source code in addon repo | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-137 | CI: split up slow jobs to make them faster | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-138 | Add script to generate HIS metrics report | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-139 | CI: create a job that builds a windows devdrop | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-140 | False negative: Cert Ctr50: (pdf example 5.1.7) incrementing iterator without checking it before | SafetySecurity | Major | 25.8.0 | Released |
| ADDON-144 | False negative: Cert Ctr50: check explicitly that index is not negative | SafetySecurity | Major | 25.8.0 | Released |
| ADDON-149 | Improve check: Cert ERR55: std::vector::insert may throw exception (Cert C++ PDF) | SafetySecurity | Major | 25.8.0 | Released |
| ADDON-154 | Improve check: Cert EXP54: constructor skipped by goto | SafetySecurity | Major | 25.8.0 | Released |
| ADDON-155 | Improve check: Cert EXP55: const_cast loosing volatile | SafetySecurity | Major | 25.8.0 | Released |
| ADDON-158 | Installation: Update win_installer scripts | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-159 | New check: Cert C++ MEM51: smart pointer and new[] | SafetySecurity | Major | 25.8.0 | Released |
| ADDON-171 | Suppressions: Output "symbolName" for some warnings. For instance Cert ERR33. | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-176 | False positive: Misra C++ 2023 15.0.1: public base class with overridden destructor | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-177 | Misra C 2025 5.10: reuse Misra C 2023 21.2 checker | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-178 | New checker: Misra C 2025 8.18 | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-179 | New checker: Misra C 2025 8.19 | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-180 | New checker: Misra C 2025 11.11 | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-181 | New checker: Misra C 2025 19.3 | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-182 | coverage.py: add misra c 2025 | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-184 | Misra C 2025 | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-185 | remove options to fetch misra rule texts | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-187 | misra-c-2012.txt rule number typo | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-188 | Implement HIS metrics: Number of comments per file | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-189 | Implement HIS metrics: number of statements in file | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-190 | Implement HIS metrics: Language scope VOCF | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-191 | CI: Run testmetrics | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-192 | False positive: Cert C++ INT50: do not warn about impossible values | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-198 | Misra C 2025 2.4: Fix warning message type=>tag | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-199 | False positive: Cert C++ DCL51: identifier with trailing underscore | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-200 | Create a FwdAnalysis module | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-201 | Simplified FwdAnalysis, visitToken functor | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-202 | CI: Build macos devdrop | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-212 | premiumaddon-debug-progress should not be enabled by default | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-213 | CI: update cppcheck binary | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-214 | Compliance report: Add --misra-c-2025 option | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-215 | Troubleshooting licensing issues | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-216 | Test: improve testing for misra c 3.1 rule | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-217 | compliance-report: fix build in oraclelinux:8 fails | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-219 | CI: release-macos.yml compliance-report compilation fails (cwe.h) | SafetySecurity | Cosmetic | 25.8.0 | Released |
| ADDON-222 | Crash in HISPath, when there is {} initializer | SafetySecurity | Cosmetic | 25.8.0.1 | Released |
| ADDON-208 | False positive: Misra C++ 2023 7.0.1: assignment to object with operator= | SafetySecurity | Cosmetic | 25.8.1 | Released |
| ADDON-220 | release: cwe info should not be fetched during release | SafetySecurity | Cosmetic | 25.8.1 | Released |
| ADDON-223 | release: Add HISReport.py to installation packages | SafetySecurity | Cosmetic | 25.8.1 | Released |
| ADDON-225 | License: Individual licenses should not provide cert/misra/autosar | SafetySecurity | Cosmetic | 25.8.1 | Released |
| ADDON-226 | bughunting: investigate bughunting performance regression | SafetySecurity | Cosmetic | 25.8.1 | Released |
| ADDON-229 | Improve usability: Add cert-c and cert-c++ commands to premium addon | SafetySecurity | Cosmetic | 25.8.1 | Released |
| ADDON-230 | CI: Fix release-windows-teamscale | SafetySecurity | Cosmetic | 25.8.1 | Released |
| ADDON-239 | Add :all flag to coding standards to check all files | SafetySecurity | Cosmetic | 25.8.1 | Released |
| ADDON-42 | False negative: Misra C 5.4: Macro T1 redefined (github #1163) | SafetySecurity | Major | 25.8.2 | Released |
| ADDON-43 | Improvement: Misra C 2023: 16.4: Add comment when default statement is empty (github #1221) | SafetySecurity | Major | 25.8.2 | Released |
| ADDON-51 | False negative Misra C 21.18 #217 | SafetySecurity | Major | 25.8.2 | Released |
| ADDON-183 | False positive: Misra C 10.2: uint8_t data | SafetySecurity | Cosmetic | 25.8.2 | Released |
| ADDON-186 | Misra C 2023 17.3 is executed on C99 code | SafetySecurity | Cosmetic | 25.8.2 | Released |
| ADDON-193 | False positive: Misra C 2012 2.5: Macro usage not seen in code that is ifdeffed out | SafetySecurity | Cosmetic | 25.8.2 | Released |
| ADDON-203 | False positive: Cert EXP34-C: std::string reference is non-null | SafetySecurity | Cosmetic | 25.8.2 | Released |
| ADDON-207 | False positive: Misra C++ 2023 17.8.1 | SafetySecurity | Cosmetic | 25.8.2 | Released |
| ADDON-209 | False positive: Misra C++ 2023 6.2.4: constexpr function defined in header | SafetySecurity | Cosmetic | 25.8.2 | Released |
| ADDON-227 | False positive: Misra C++ 2023 6.9.2: misplaced warning for template argument | SafetySecurity | Cosmetic | 25.8.2 | Released |
| ADDON-228 | Misra C 3.2: update cppcheck in CI and ensure Misra C 3.2 checker still works with latest cppcheck HEAD | SafetySecurity | Major | 25.8.2 | Released |
| ADDON-234 | False positive: Misra C++ 7.11.3: casting function pointer | SafetySecurity | Cosmetic | 25.8.2 | Released |
| ADDON-235 | False positive: Misra C++ 28.6.1: calling std::move on member of rvalue reference source object | SafetySecurity | Cosmetic | 25.8.2 | Released |
| ADDON-236 | False positive: Misra C++ 2023 15.1.3: explicit constexpr conversion operator | SafetySecurity | Cosmetic | 25.8.2 | Released |
| ADDON-237 | False positive: Misra C++ 7.0.2: cast object that has bool operator to bool | SafetySecurity | Cosmetic | 25.8.2 | Released |
| ADDON-238 | False positive: Misra C++ 7.0.2: noexcept return value | SafetySecurity | Cosmetic | 25.8.2 | Released |
| ADDON-241 | Misra C++ 2023 8.0.1, 10.2.3: misplaced warning for template argument | SafetySecurity | Cosmetic | 25.8.2 | Released |
| ADDON-242 | False positive: Misra C 12.3: declaring multiple variables | SafetySecurity | Cosmetic | 25.8.2 | Released |
| ADDON-243 | False negative: Misra C 2.2: function call when function body is empty | SafetySecurity | Major | 25.8.2 | Released |
| ADDON-244 | Misra C 2023 2.4: wrong location, point at tag | SafetySecurity | Cosmetic | 25.8.2 | Released |
| ADDON-245 | False negative: Misra C 5.6: typedef and variable | SafetySecurity | Major | 25.8.2 | Released |
| ADDON-246 | False positive: misra c 2.4: struct without tag | SafetySecurity | Cosmetic | 25.8.2 | Released |
| ADDON-247 | False positive: Misra C 4.2: ?? in comment is not trigraph | SafetySecurity | Cosmetic | 25.8.2 | Released |
| ADDON-248 | False positive: Cert ERR30-C: warning about '(' function | SafetySecurity | Cosmetic | 25.8.2 | Released |
| ADDON-249 | False positive: Misra C 7.4: initialization of char buffer | SafetySecurity | Cosmetic | 25.8.2 | Released |
| ADDON-250 | False positive: Misra C++ 2023 6.4.2: Override method from grandparent | SafetySecurity | Cosmetic | 25.8.2 | Released |
| ADDON-251 | False positive: Misra C++ 2023 15.0.1: public inheritance, base class has a public virtual destructor | SafetySecurity | Cosmetic | 25.8.2 | Released |
| ADDON-252 | fails to load custom cfg file in relative path | SafetySecurity | Cosmetic | 25.8.2 | Released |
| ADDON-253 | False positive: Misra C 8.5: variable declared in header | SafetySecurity | Cosmetic | 25.8.2 | Released |
| ADDON-255 | False positive: Misra C++ 2023 7.0.2: function with r-value reference | SafetySecurity | Cosmetic | 25.8.2 | Released |
| ADDON-256 | Misra C 11.4: Add <symbolName> attribute | SafetySecurity | Cosmetic | 25.8.2 | Released |
| ADDON-257 | Misra C 17.7: Add <symbolName> attribute | SafetySecurity | Cosmetic | 25.8.2 | Released |
| ADDON-258 | False positive: Misra C 9.2: enum array | SafetySecurity | Cosmetic | 25.8.2 | Released |
| ADDON-260 | False negative: Misra C 7.4: initialization of char pointer array | SafetySecurity | Major | 25.8.2 | Released |
| ADDON-261 | Implement Misra C Dir 4.7 checker, reusing Cert ERR33-C | SafetySecurity | Cosmetic | 25.8.2 | Released |
| ADDON-262 | Crash: declaring function in function | SafetySecurity | Cosmetic | 25.8.2 | Released |
| ADDON-263 | Crash: empty array initialization {} | SafetySecurity | Cosmetic | 25.8.2 | Released |
| ADDON-264 | Crash: Misra C: Unary minus | SafetySecurity | Cosmetic | 25.8.2 | Released |
| ADDON-265 | Crash: Misra C 7.4: Undeclared struct type | SafetySecurity | Cosmetic | 25.8.2 | Released |
| ADDON-254 | False positive: Misra C++ 0.2.4: called from template function | SafetySecurity | Cosmetic | 25.8.3 | Released |
| ADDON-267 | False positive: Misra C 5.4: macro defined in #if and #else | SafetySecurity | Cosmetic | 25.8.3 | Released |
| ADDON-269 | Licensing: For old business licenses, misra must be supported | SafetySecurity | Cosmetic | 25.8.3 | Released |
| ADDON-69 | Improve checkers; Casting integer 0 to pointer, warn about return (github #484) | SafetySecurity | Major | 25.8.4 | Released |
| ADDON-141 | Add gitlicensemetrics tool to installation packages | SafetySecurity | Cosmetic | 25.8.4 | Released |
| ADDON-142 | Installation: Link to EULA | SafetySecurity | Cosmetic | 25.8.4 | Released |
| ADDON-146 | False negative: Cert Ctr53-CPP: loop from end() to begin() | SafetySecurity | 25.8.4 | Released | |
| ADDON-151 | Improve check: Cert EXP54-CPP: using pointer after delete (derived class) | SafetySecurity | Major | 25.8.4 | Released |
| ADDON-152 | Improve check: Cert EXP54-CPP: std::initializer_list member | SafetySecurity | Major | 25.8.4 | Released |
| ADDON-169 | Improve checker: Cert OOP55-CPP: static pointer initialized to null | SafetySecurity | Major | 25.8.4 | Released |
| ADDON-174 | False negative: Cert STR53-CPP: access std::string::front() when string could be empty | SafetySecurity | Major | 25.8.4 | Released |
| ADDON-195 | register.py must be executed in installation folder | SafetySecurity | Cosmetic | 25.8.4 | Released |
| ADDON-204 | False positive: Cert PRE08-C: unordered_map and unordered_set are different | SafetySecurity | Cosmetic | 25.8.4 | Released |
| ADDON-205 | False positive: Misra C++ 2023 8.2.7: const char array is not integer | SafetySecurity | Cosmetic | 25.8.4 | Released |
| ADDON-206 | False positive: Misra C++ 2023 8.20.1: nonwrapping sizeof expression | SafetySecurity | Cosmetic | 25.8.4 | Released |
| ADDON-210 | False negative: Misra C++ 21.6.3: placement new and destructor call | SafetySecurity | Major | 25.8.4 | Released |
| ADDON-211 | False negative: Misra C++ 8.0.1: a == 0 && b == 0; | SafetySecurity | Major | 25.8.4 | Released |
| ADDON-224 | release: the linux script should switch to qt6 | SafetySecurity | Cosmetic | 25.8.4 | Released |
| ADDON-233 | False positive: Misra C++ 18.4.1: warns about assignment operator which looks similar to a move-assignment-operator | SafetySecurity | Cosmetic | 25.8.4 | Released |
| ADDON-259 | False positive: Cert PRE02-C: warns for 'const_cast<..>(x)' | SafetySecurity | Cosmetic | 25.8.4 | Released |
| ADDON-266 | Investigate crash: enum declaration, "new" type as a return type for a function | SafetySecurity | Cosmetic | 25.8.4 | Released |
| ADDON-268 | False positive: Misra C Dir 4.4: comment with @ is not code | SafetySecurity | Cosmetic | 25.8.4 | Released |
| ADDON-270 | Misra C 11.4: write <symbolName> for macro: const char *p = ZERO; | SafetySecurity | Cosmetic | 25.8.4 | Released |
| ADDON-271 | Crash: Misra C 9.3: long long array | SafetySecurity | Cosmetic | 25.8.4 | Released |
| ADDON-273 | Improve check: Cert ARR39-C: multiplication with sizeof | SafetySecurity | Major | 25.8.4 | Released |
| ADDON-274 | Improve check: Cert EXP36-C: cast from char pointer to struct pointer | SafetySecurity | Major | 25.8.4 | Released |
| ADDON-276 | MISRA C 20.9 text contains \342\200\231 characters | SafetySecurity | Cosmetic | 25.8.4 | Released |
| ADDON-277 | Crash: Cert Arr39: Unary operator | SafetySecurity | Cosmetic | 25.8.4 | Released |
| ADDON-278 | New check: Cert EXP30-C: Reuse Misra C 13.2 functionality | SafetySecurity | Cosmetic | 25.8.4 | Released |
| ADDON-279 | Cleanup: Cert Arr39-C and unary * | SafetySecurity | Cosmetic | 25.8.4 | Released |
| ADDON-280 | False negative: Cert EXP35-C: taking address of array in temporary struct | SafetySecurity | Major | 25.8.4 | Released |
| ADDON-281 | New check: Cert STR30-C: Reuse functionality from Misra C | SafetySecurity | Cosmetic | 25.8.4 | Released |
| ADDON-282 | Crash: Cert STR30-C: no middle operand for ternary operator | SafetySecurity | Cosmetic | 25.8.4 | Released |
| ADDON-283 | New check: Cert MSC41-C: Never hard code sensitive information | SafetySecurity | Cosmetic | 25.8.4 | Released |
| ADDON-284 | Crash: Cert C: EXP35-C: Check operand with no variable set | SafetySecurity | Major | 25.8.4 | Released |
| ADDON-285 | Optimise cmake build script, use core library | SafetySecurity | Cosmetic | 25.8.4 | Released |
| ADDON-286 | Claude: Memory leak in | SafetySecurity | 25.8.4 | Released | |
| ADDON-288 | False positive: Cert EXP34-C: null pointer check then dereference | SafetySecurity | Cosmetic | 25.8.4 | Released |
| ADDON-289 | Crash: Misra C++ 8.2.2: android framework: std::make_index_sequence | SafetySecurity | Cosmetic | 25.8.4 | Released |
| ADDON-290 | CI: Review with AI | SafetySecurity | Cosmetic | 25.8.4 | Released |
| ADDON-291 | Update uncrustify version in runformat | SafetySecurity | Cosmetic | 25.8.4 | Released |
| ADDON-293 | Claude: logic errors in dumpdata | SafetySecurity | Cosmetic | 25.8.4 | Released |
| ADDON-294 | claude: logic error findings in checkmisra | SafetySecurity | Cosmetic | 25.8.4 | Released |
| ADDON-297 | Refactor Container::getFunction | SafetySecurity | Cosmetic | 25.8.4 | Released |
| ADDON-298 | compliance report returns nonzero when there are inline suppressions | SafetySecurity | Cosmetic | 25.8.4 | Released |
| ADDON-299 | False positive: Misra C 10.8: no essential type for sqrtf(value) | SafetySecurity | Cosmetic | 25.8.4 | Released |
| ADDON-300 | False positive: Cert EXP34-C: argv string is not null | SafetySecurity | Cosmetic | 25.8.4 | Released |
| ADDON-301 | New check: Cert ERR34-C: Detect errors when converting a string to a number | SafetySecurity | Cosmetic | 25.8.4 | Released |
| ADDON-302 | False negative: Misra C 5.6: example suite: tag not associated with typedef | SafetySecurity | Major | 25.8.4 | Released |
| ADDON-304 | False negative: Misra C 11.2: ( int16_t * ) sp | SafetySecurity | Major | 25.8.4 | Released |
| ADDON-307 | False negative: Misra C 12.1: sizeof x + y | SafetySecurity | Major | 25.8.4 | Released |
| ADDON-308 | False negative: Misra C 14.1: while loop | SafetySecurity | Major | 25.8.4 | Released |
| ADDON-309 | False negative: Misra C 8.2: K&R function | SafetySecurity | Major | 25.8.4 | Released |
| ADDON-311 | CI: Remove pr-review.yml | SafetySecurity | Cosmetic | 25.8.4 | Released |
| ADDON-312 | Hang in hasPersistentSideEffects when checking angelscript-2.35 | SafetySecurity | Cosmetic | 25.8.4 | Released |
| ADDON-313 | Hang: fwdanalysis, initialization of array of structs | SafetySecurity | Cosmetic | 25.8.4 | Released |
| ADDON-314 | False positive: Misra C 8.12: enumerator used in expression | SafetySecurity | Cosmetic | 25.8.4 | Released |
| ADDON-315 | HIS Metric: LEVEL too high (else if) | SafetySecurity | Cosmetic | 25.8.4 | Released |
| ADDON-316 | HIS Metrics: Cyclomatic complexity is one too low when && is used | SafetySecurity | Cosmetic | 25.8.4 | Released |
| ADDON-317 | New check: Cert DCL05-C: Use typedefs of non-pointer types only | SafetySecurity | Cosmetic | 25.8.4 | Released |
| ADDON-318 | New check: Cert DCL06-C: Use meaningful symbolic constants | SafetySecurity | Cosmetic | 25.8.4 | Released |
| ADDON-320 | False positive: Cert EXP34-C: object[] | SafetySecurity | Cosmetic | 25.8.4 | Released |
| ADDON-321 | False positive: Misra C++ 2023 22.3.1: Assuming constant value from a function call | SafetySecurity | Major | 25.8.4 | Released |
| ADDON-322 | Fix new variableScope warning reported by selfcheck | SafetySecurity | Cosmetic | 25.8.4 | Released |
| ADDON-323 | STMT metric not calculated correctly for constructor with initializer list | SafetySecurity | Cosmetic | 25.8.4 | Released |
| ADDON-324 | Slow analysis in Cert STR30-C for initialization {....} | SafetySecurity | Cosmetic | 25.8.4 | Released |
| ADDON-325 | False positive: Misra C 2023 2.7: Parenthesis enclosed parameter | SafetySecurity | Major | 25.8.4 | Released |
| ADDON-327 | update openssl code | SafetySecurity | Cosmetic | 25.8.4 | Released |
| ADDON-346 | ci: build cppcheck premium on macos-26 runner | SafetySecurity | Cosmetic | 25.8.4 | Released |
| ADDON-349 | False positive: Misra C 10.3: Exception 2 should apply to 2012 and 2023 also | SafetySecurity | Cosmetic | 25.8.4 | Released |
| ADDON-352 | Dumpdata: handle C standard C2Y | SafetySecurity | Cosmetic | 25.8.4 | Released |
| ADDON-353 | CI: clarify compliance-report output when it fails | SafetySecurity | Cosmetic | 25.8.4 | Released |
| ADDON-354 | write logChecker debug messages | SafetySecurity | Cosmetic | 25.8.4 | Released |
| ADDON-355 | CI: build macos-26 teamscale release package | SafetySecurity | Cosmetic | 25.8.4 | Released |
| ADDON-359 | False positive: Cert dcl20 on C++ code? | SafetySecurity | Cosmetic | 25.8.4 | Released |
| ADDON-360 | False positive: Misra C 2023 16.1: for loop in case statement | SafetySecurity | Major | 25.8.4 | Released |
| ADDON-150 | Improve check: Cert EXP50-CPP: unknown evaluation order 'func(a(), b())' checking for side effects in subfunctions | SafetySecurity | Major | 26.1.0 | Released |
| ADDON-160 | Improve check: Cert MEM52-CPP: new after allocation | SafetySecurity | Major | 26.1.0 | Released |
| ADDON-287 | False positive: Misra C 10.8: UINT32_C | SafetySecurity | Cosmetic | 26.1.0 | Released |
| ADDON-305 | False negative: Misra C 14.2: altering loop counter in loop body | SafetySecurity | Major | 26.1.0 | Released |
| ADDON-310 | False negative: Misra C 8.2: function pointer | SafetySecurity | Major | 26.1.0 | Released |
| ADDON-319 | False positive: misra-config for struct member ((sys_t *)10000U)->a | SafetySecurity | Cosmetic | 26.1.0 | Released |
| ADDON-326 | Improve check: Cert ARR30-C: unconditional pointer arithmetic (CVE-2018-14938) | SafetySecurity | Cosmetic | 26.1.0 | Released |
| ADDON-333 | False negative: Misra C Rule 5.3: typedef shadows variable | SafetySecurity | Major | 26.1.0 | Released |
| ADDON-339 | False negative: Misra C 10.1: Extern variables | SafetySecurity | Major | 26.1.0 | Released |
| ADDON-340 | False negative: Misra C 2023 Rule 10.3: Assignment signed to unsigned | SafetySecurity | Major | 26.1.0 | Released |
| ADDON-341 | False negative: Misra C 2023 Rule 10.5: enum conversion | SafetySecurity | Major | 26.1.0 | Released |
| ADDON-342 | False negative: Misra C Rule 10.6: float to double conversion | SafetySecurity | Major | 26.1.0 | Released |
| ADDON-343 | False negative: Misra C 11.1: function pointer argument types | SafetySecurity | Major | 26.1.0 | Released |
| ADDON-347 | False positive: Misra C 10.3: Essential type for function that returns char | SafetySecurity | Cosmetic | 26.1.0 | Released |
| ADDON-348 | False positive: Misra C 10.3: designated array initializer | SafetySecurity | Cosmetic | 26.1.0 | Released |
| ADDON-350 | False negative: Misra C 5.8: static and extern linkage | SafetySecurity | Major | 26.1.0 | Released |
| ADDON-351 | False negative: Misra C 5.9: static functions | SafetySecurity | Major | 26.1.0 | Released |
| ADDON-356 | False negative: Misra C 2023 Rule 5.7: Redefining struct | SafetySecurity | Major | 26.1.0 | Released |
| ADDON-357 | False negative: Misra C 5.7: Typedef struct with same name as child struct | SafetySecurity | Major | 26.1.0 | Released |
| ADDON-362 | False positive: Misra C 1.5: global static enum variable | SafetySecurity | Cosmetic | 26.1.0 | Released |
| ADDON-365 | CMakeLists.txt make it possible to compile with mingw | SafetySecurity | Cosmetic | 26.1.0 | Released |
| ADDON-366 | False positive: Misra config: Enum marked as unknown variable when enum value assigned with constant | SafetySecurity | Cosmetic | 26.1.0 | Released |
| ADDON-367 | False negative: Misra C 11.5: Implicit conversion of return type | SafetySecurity | Major | 26.1.0 | Released |
| ADDON-368 | False negative: use after free not detected after exit() | SafetySecurity | Major | 26.1.0 | Released |
| ADDON-370 | Improve usability: Compliance report should return 0 exit code on succsessful finish regardless of the broken rules | SafetySecurity | Cosmetic | 26.1.0 | Released |
| ADDON-371 | CI: Remove deprecated macos-13 builder | SafetySecurity | Cosmetic | 26.1.0 | Released |
| ADDON-372 | False negative: Misra C 5.1: extern variables name different case | SafetySecurity | Major | 26.1.0 | Released |
| ADDON-373 | CI: Fix testautosar example code | SafetySecurity | Cosmetic | 26.1.0 | Released |
| ADDON-374 | False negative: Misra C++ 9.4.2: missing default in switch | SafetySecurity | Major | 26.1.0 | Released |
| ADDON-378 | CI: Fix selfcheck (src/exprengine.cpp: redundantAssignment) | SafetySecurity | Cosmetic | 26.1.0 | Released |
| ADDON-379 | Refactoring: Create utility function to get enum constants | SafetySecurity | Cosmetic | 26.1.0 | Released |
| ADDON-380 | False positive: Cert CTR50-CPP: iterator is checked properly in loops | SafetySecurity | Cosmetic | 26.1.0 | Released |
| ADDON-381 | False positive: Cert CTR50-CPP: for loop index | SafetySecurity | Cosmetic | 26.1.0 | Released |
| ADDON-382 | False positive: Misra C 13.2: do not warn for 'a->b->c = d' | SafetySecurity | Cosmetic | 26.1.0 | Released |
| ADDON-383 | Crash: Use after free: while loop that deletes all objects in list | SafetySecurity | Cosmetic | 26.1.0 | Released |
| ADDON-384 | Crash: Misra C 14.2: get for loop counter variable, empty 1st expression | SafetySecurity | Cosmetic | 26.1.0 | Released |
| ADDON-386 | False positives: Misra C++ 2023 7.0.3: distinguish between char and int8_t/uint8_t types | SafetySecurity | Cosmetic | 26.1.0 | Released |
| ADDON-387 | Improve check: Misra C 5.3: same inner and outer tagnames | SafetySecurity | Major | 26.1.0 | Released |
| ADDON-388 | False positive: Misra C 2.5: #define and #undef macro | SafetySecurity | Cosmetic | 26.1.0 | Released |
| ADDON-389 | False positive: Misra C 11.5: null pointer macro | SafetySecurity | Cosmetic | 26.1.0 | Released |
| ADDON-390 | Compliance report: Show suppression comment | SafetySecurity | Cosmetic | 26.1.0 | Released |
| ADDON-391 | False positive: Misra C Dir 4.6: 2 typedefs | SafetySecurity | Cosmetic | 26.1.0 | Released |
| ADDON-393 | False positive: Misra C 21.2, 5.10 / Cert C dcl37: functions in custom cfg file | SafetySecurity | Cosmetic | 26.1.0 | Released |
| ADDON-395 | False negative: Misra C 10.4: comparison of function result in return | SafetySecurity | Major | 26.1.0 | Released |
| ADDON-397 | Check our Misra C coverage using code provided by customer | SafetySecurity | Cosmetic | 26.1.0 | Released |
| ADDON-398 | Refactoring: Misra C 21.2, 5.10 / Cert C dcl37: reuse code to detect violations | SafetySecurity | Cosmetic | 26.1.0 | Released |
| ADDON-400 | False positive: Misra C 13.3: increment of volatile variable | SafetySecurity | Cosmetic | 26.1.0 | Released |
| ADDON-401 | False positive: CERT EXP34-C: custom library says function parameter cant be null | SafetySecurity | Cosmetic | 26.1.0 | Released |
| ADDON-403 | Improve checking: Cert DCL06-C: float constant | SafetySecurity | Major | 26.1.0 | Released |
| ADDON-406 | Execute fetch.py to update CERT mappings | SafetySecurity | Cosmetic | 26.1.0 | Released |
| ADDON-407 | CI: Update Cppcheck binary | SafetySecurity | Cosmetic | 26.1.0 | Released |
| ADDON-408 | coverage.py: map dangerousTypeCast | SafetySecurity | Major | 26.1.0 | Released |
| ADDON-409 | enable more gcc compiler warnings | SafetySecurity | Cosmetic | 26.1.0 | Released |
| ADDON-410 | Crash: Cert EXP34-C: method without class no function | SafetySecurity | Cosmetic | 26.1.0 | Released |
| ADDON-411 | internal error: deleted pointer used in condition | SafetySecurity | Cosmetic | 26.1.0 | Released |
| ADDON-414 | Compliance report: misra c 2025 rules are not shown properly | SafetySecurity | Critical | 26.1.0 | Released |
| ADDON-157 | Improve check: Cert EXP53-CPP: Uninitialized pointer/variable usage in catch | SafetySecurity | Major | 26.3.0 | Released |
| ADDON-163 | Improve check: Cert MEM54-CPP: placement new uses variable that is too small | SafetySecurity | Major | 26.3.0 | Released |
| ADDON-240 | False positive: Misra C++ 2023 0.2.1: Template argument | SafetySecurity | Cosmetic | 26.3.0 | Released |
| ADDON-275 | Map unusedFunction to Misra C 2.2 | SafetySecurity | Major | 26.3.0 | Released |
| ADDON-292 | False positive: Misra C 10.3: essential type for pointer | SafetySecurity | Cosmetic | 26.3.0 | Released |
| ADDON-344 | False negative: Misra C 11.3: PDF example: ( const int * const * ) pcpi | SafetySecurity | Major | 26.3.0 | Released |
| ADDON-376 | False negative: Misra C 5.6: typedef and local variable | SafetySecurity | Major | 26.3.0 | Released |
| ADDON-394 | Compliance report: Show location of inline suppressions | SafetySecurity | Cosmetic | 26.3.0 | Released |
| ADDON-399 | Investigate 17961 coverage | SafetySecurity | Cosmetic | 26.3.0 | Released |
| ADDON-402 | Remove Microchip license | SafetySecurity | 26.3.0 | Released | |
| ADDON-405 | New check: Cert INT13-C: Reuse checking for Misra C++ 2008 5-0-21 | SafetySecurity | Cosmetic | 26.3.0 | Released |
| ADDON-412 | False negative MISRA C rule 10.3: pointer | SafetySecurity | Major | 26.3.0 | Released |
| ADDON-413 | False positive: Cert STR30-C: reading from array | SafetySecurity | Cosmetic | 26.3.0 | Released |
| ADDON-415 | False positive: Cert CTR50-CPP: silent about dangerous iterator usage, and then warns about safe iterator increment | SafetySecurity | Cosmetic | 26.3.0 | Released |
| ADDON-417 | simplify function names for checkcert.cpp checkers | SafetySecurity | Cosmetic | 26.3.0 | Released |
| ADDON-418 | False positive: Misra C 2023 8.1: Ellipsis used as function parameter | SafetySecurity | Cosmetic | 26.3.0 | Released |
| ADDON-419 | False positive: Misra C 2023 8.2: Ellipsis used as function parameter | SafetySecurity | Major | 26.3.0 | Released |
| ADDON-421 | False positive: Misra C 2023 10.3: Compound assignment | SafetySecurity | Cosmetic | 26.3.0 | Released |
| ADDON-424 | False positive: Misra C++ 2023 11.6.1: class object | SafetySecurity | Cosmetic | 26.3.0 | Released |
| ADDON-425 | False negative: Cert STR31-C: PDF example getchar() | SafetySecurity | Major | 26.3.0 | Released |
| ADDON-426 | False negative: Cert STR31-C: PDF example argv | SafetySecurity | Major | 26.3.0 | Released |
| ADDON-427 | False negative: Cert STR31-C: PDF example getenv() | SafetySecurity | Major | 26.3.0 | Released |
| ADDON-428 | False negative: Cert STR31-C: PDF example sprintf | SafetySecurity | Major | 26.3.0 | Released |
| ADDON-429 | False positive: Cert STR30-C: passing const char pointers to function | SafetySecurity | Cosmetic | 26.3.0 | Released |
| ADDON-431 | False positive: Cert STR31-C: loop counter | SafetySecurity | Cosmetic | 26.3.0 | Released |
| ADDON-433 | False Negative: Misra C++ 2023 7.0.3: The numerical value of a character shall not be used | SafetySecurity | Major | 26.3.0 | Released |
| ADDON-436 | False positive: Misra C 5.7: exception, same tag name and typedef name | SafetySecurity | Cosmetic | 26.3.0 | Released |
| ADDON-437 | HIS Metrics: Cyclomatic complexity for 'if (a) if (b) return;' | SafetySecurity | Cosmetic | 26.3.0 | Released |
| ADDON-439 | Windows installer: provide cppcheck.py | SafetySecurity | Cosmetic | 26.3.0 | Released |
| ADDON-440 | False positive: Misra C 2025: 17.3: triggered by calling callbacks that are initialized with const | SafetySecurity | Cosmetic | 26.3.0 | Released |
| ADDON-441 | False positive: Misra C 11.3: false positive for pointer conversion to character type exception | SafetySecurity | Cosmetic | 26.3.0 | Released |
| ADDON-444 | False Negative: Misra C : 16.6: Two cases but one switch-clause | SafetySecurity | Major | 26.3.0 | Released |
| ADDON-446 | False Positive: Misra C 2025 14.2: set_val | SafetySecurity | Cosmetic | 26.3.0 | Released |
| ADDON-458 | False Negative: Misra C 5.9: PDF example "count" | SafetySecurity | Major | 26.3.0 | Released |
| ADDON-459 | crash: cert str31-c: sprintf (buf, fmt, n) | SafetySecurity | Cosmetic | 26.3.0 | Released |
| ADDON-460 | Crash: Misra C 10.3: double = float | SafetySecurity | Cosmetic | 26.3.0 | Released |
| ADDON-461 | CI: Update Cppcheck binary | SafetySecurity | Cosmetic | 26.3.0 | Released |
| ADDON-462 | False positive: Misra C 10.6: double d = (double)a / (double)b | SafetySecurity | Cosmetic | 26.3.0 | Released |
| ADDON-463 | False positive: Misra C++ 2023 8.2.5: PDF example std::byte | SafetySecurity | Cosmetic | 26.3.0 | Released |
| ADDON-464 | False Negative: Misra C 5.1: PDF Example, Correct the "significant naming chars" | SafetySecurity | Major | 26.3.0 | Released |
| ADDON-465 | Refactor: Misra C CTU requires that summary is first attribute in ctu info | SafetySecurity | Cosmetic | 26.3.0 | Released |
| ADDON-466 | False positive MISRA C directive 4.4: usage of a semicolon within a comment | SafetySecurity | Cosmetic | 26.3.0 | Released |
| ADDON-467 | Fix gcc build problem (-Wignored-attributes) | SafetySecurity | Cosmetic | 26.3.0 | Released |
| ADDON-469 | Integration testing for our system checkers | SafetySecurity | Cosmetic | 26.3.0 | Released |
| ADDON-471 | Remove redundant Misra C 5.1 checker | SafetySecurity | Cosmetic | 26.3.0 | Released |
| ADDON-473 | Fix: Misra C: Broken CTU in recent fixes | SafetySecurity | Major | 26.3.0 | Released |
| ADDON-474 | Crash: segmentation fault in FwdAnalysis | SafetySecurity | Cosmetic | 26.3.0 | Released |
| ADDON-476 | False positive MISRA C: Rule 7.2 on UINT64_C() macro usage | SafetySecurity | Cosmetic | 26.3.0 | Released |
| ADDON-477 | Misra C 8.3: misplaced warning | SafetySecurity | Cosmetic | 26.3.0 | Released |
| ADDON-478 | CI: execute ci-linux.yml job on ubuntu-24.04 also | SafetySecurity | Cosmetic | 26.3.0 | Released |
| ADDON-480 | False negative: Misra C 11.9: integer literal 0 in assignment | SafetySecurity | Major | 26.3.0 | Released |
| ADDON-483 | False negative: Misra C 15.3: inner scope in switch | SafetySecurity | Major | 26.3.0 | Released |
| ADDON-484 | False negative: Misra C 15.4: goto breaks both inner and outer loop | SafetySecurity | Major | 26.3.0 | Released |
| ADDON-485 | False negative: Misra C 5.7: Pdf example struct elk | SafetySecurity | Major | 26.3.0 | Released |
| ADDON-486 | False negative: Misra C Dir 4.5: id2_abc, id2_ABC | SafetySecurity | Major | 26.3.0 | Released |
| ADDON-488 | Add script that generates coverage report for Misra C example suite | SafetySecurity | Cosmetic | 26.3.0 | Released |
| ADDON-490 | False negative: Autosar, Misra C/C++: converting 0 to pointer in function call | SafetySecurity | Major | 26.3.0 | Released |
| ADDON-491 | False negative: Autosar A0-1-2: mapped to misra c 17.7 | SafetySecurity | Major | 26.3.0 | Released |
| ADDON-492 | False negative: Autosar A2-5-1: reuse logic from M2-3-1 | SafetySecurity | Major | 26.3.0 | Released |
| ADDON-493 | Compliance report: misra C:2025 does not have a default output filename | SafetySecurity | Cosmetic | 26.3.0 | Released |
| ADDON-494 | Autosar: A5-2-2: pedantic checking | SafetySecurity | Major | 26.3.0 | Released |
| ADDON-496 | CI: update the windows-devdrop action | SafetySecurity | Cosmetic | 26.3.0 | Released |
| ADDON-498 | Crash: Misra C 14.2: for (line_step(line); line[2] > 0; line_step(line)) | SafetySecurity | Cosmetic | 26.3.0 | Released |
| ADDON-499 | 26.3.0: update and run coverage.py | SafetySecurity | Cosmetic | 26.3.0 | Released |
| ADDON-501 | Release: Add script that generates premiumaddon.json | SafetySecurity | Cosmetic | 26.3.0 | Released |
| ADDON-502 | CI: selfcheck initializerList | SafetySecurity | Cosmetic | 26.3.0 | Released |
| ADDON-131 | Improvement: Compliance report: add --help option | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-164 | Improve check: Cert MEM54-CPP: placement new data does not have proper alignment | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-197 | Mapping uselessCallsRemove to EXP63-CPP | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-303 | False negative: Misra C misra-config: no warning about cast to unknown type | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-306 | False negative: Misra C 17.2: recursion | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-329 | Safety profile: Implement bounds profile | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-334 | False negative: Misra C 2023 Rule 8.1: Pdf example, function pointer typedefs | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-335 | False negative: Misra C:20xx Rule 8.2: parameter name not specified in typedef | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-361 | Document: checkers in premium addon | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-377 | False negative: Misra C 5.8: extern/static variable | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-385 | Improvement: Compliance report: option to summarize suppressions | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-416 | False positive: Misra C++ 28.6.1: unknown type | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-438 | False positive: Misra C++ 2023 0.2.4: Functions with limited visibility should be used at least once | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-445 | False Negative: Misra C : 15.3 | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-468 | False Positive Cert INT31-C: Safe narrowing conversion flagged despite range check | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-479 | coverage.py: map constParameter to misra c 8.13 | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-495 | Add script that generates coverage report for Autosar PDF examples | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-500 | False positive: Misra C :13.1 constant macro initializer using UINT32_C | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-503 | ensure that git-license-metrics tool is provided in all linux/mac installation packages | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-505 | New check: Misra C Dir 4.10: Reuse Cert PRE06-C checking | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-506 | False positive: MISRA C++ 7.0.3: all assignments of uint8_t variables get flagged | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-507 | False positive: Misra C 14.1 reported for floating variable not used as loop counter | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-508 | False positive: Misra C 10.3: essential type for enum pointer data '*ptrEnumValue' | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-510 | Improve check: Misra C++ 2008 0-1-2: u16a <= 0xffff | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-511 | False positive: Cert C: INT13-C: applying bitwise operation on uint8_t variable | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-512 | False positive: Cert C: DCL03-C: the expression must be "compile-time constant". | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-513 | False Positive: Autosar A0-1-2: Explicit Destructor Call | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-514 | False positive: Misra C 10.6: reported for non-composite expression in pointer dereference assignment | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-515 | False positive: Misra C 10.8: conditional operator | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-516 | False positive: Misra C 10.8: char plus u8 | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-518 | False positive: Misra C 13.2: passing addresses of volatile variables as function arguments | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-519 | False positive: Misra C 17.3: __attribute__((aligned)) pointer declarator in struct member | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-520 | Improvement: Misra C 8.13 | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-521 | Improvement: Misra C 12.2 | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-522 | False Positive: Autosar A0-1-3: Template specializations | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-524 | Misra C 1.2 | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-525 | False Negative: Misra C 1.2: extension __attribute__ should not be used | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-527 | False Positive: Autosar A0-4-4: warning for non-math functions | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-528 | False Negative: Misra C 1.2: extension binary integer literal should not be used | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-529 | False positive: Misra C 2.2: 42 - X | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-530 | False Negative: Misra C 1.2: extension typeof should not be used | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-531 | False positive: Misra C 13.2: reading pointer value of 'volatile uint16_t* ptr' | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-532 | False positive: Misra C 11.6: address of the pointer is converted to integer | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-533 | False Negative: Misra C 1.2: extension __extension__ should not be used | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-534 | False positive: Misra C 6.1: bit-field with type unsigned long may be compliant | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-535 | False Negative: Misra C 1.2: extension __builtin_ should not be used | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-536 | False Negative: Misra C 1.2: extension inline assembly should not be used | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-537 | False Negative: Misra C 1.2: extension __label__ should not be used | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-538 | False Negative: Misra C 1.2: extension case ranges should not be used | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-539 | False Negative: Misra C 1.2: extension Zero-length arrays should not be used | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-540 | False Negative: Misra C 1.2: extension Non-standard integer types should not be used | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-541 | False negative: Misra C 18.6: mapping autoVariables to 18,6 | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-543 | False positive MISRA C: Rule 9.2: Missing braces around subarray initializers in 2D array | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-544 | False positive MISRA C: Rule 9.3: partial initialization of subarray elements in 2D char array | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-546 | False Negative: MISRA C 17.9: infinite 'for' loop | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-547 | Misra C 14.1 | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-548 | False negative: Misra C 14.1: do-while loops are not detected | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-549 | Improve check: MISRA C 14.2: A for loop shall be well-formed | SafetySecurity | 26.6.0 | Released | |
| ADDON-550 | False negative: Misra C 14.1: struct/union member variables are not detected as counters | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-551 | False positive: Misra C 8.2: valid prototype with named parameter | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-552 | Misra C 22.17 | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-553 | False negative: Misra C 22.17: pdf example warn on cnd_wait/cnd_timedwait | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-554 | Improve check: Misra C 14.2: A for loop shall be well-formed | SafetySecurity | 26.6.0 | Released | |
| ADDON-563 | False Negative : MISRA C 8.5 : Identifier declared multiple times in same file | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-565 | False Negative : MISRA C 8.6 : Identifiers with external linkage having multiple or missing definitions | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-569 | Crash: MISRA C 14.2: A for loop shall be well-formed | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-570 | False negative: MISRA C 17.8: A function parameter should not be modified | SafetySecurity | 26.6.0 | Released | |
| ADDON-571 | False negative: Misra C 22.17: Double-unlock after a paired lock/unlock sequence | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-572 | False Positive : MISRA C 10.3 : Character type is assigned a compatible arithmetic result | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-573 | False Negative : MISRA C 14.3 : Invariant controlling expression causing unreachable code | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-577 | False Negative : MISRA C 17.3 : Function power called without visible prototype or prior declaration | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-578 | Crash: Misra C++ 2023 5.13.7 | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-581 | False Negative: Misra C 17.8: modification of function parameter via pointer | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-582 | False negative: Misra C 22.17: Conditional locking | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-586 | False Negative : MISRA C 18.1 : indexing exceeds the internal boundaries of the multi-dimensional array | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-594 | False Positive : MISRA C 20.7 : Compliant macro GET_MEMBER(S, M) with S as expression and M as member name incorrectly flagged | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-596 | False Negative : MISRA C 21.17 : strlen on array text reading beyond bounds due to absence of null terminator not detected | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-601 | False Negative : MISRA C 22.9 : Function call occurring between errno assignment, potentially overwriting error state | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-602 | False Negative: Misra C 21.19: cast wrap not being detected | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-603 | False Negative: Misra C 21.19: returning non-const function not detected | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-606 | False positive: Misra C 10.4: add postive constant id | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-607 | Misra C 17.11: _Noreturn function specifier | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-608 | False Negative: Misra C 17.11: Function that never returns because of an unconditional infinite loop | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-609 | False Negative: Misra C 17.11: Functions with noreturn library call is inside a nested scope | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-610 | False Negative: Misra C 17.11: Function that delegates to a user-defined `_Noreturn` function | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-611 | False positive: Misra C 7.4: String literal assigned to const char pointer in struct initialization | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-613 | False positive: Misra C 17.12: reported despite explicit address-of operator on function identifier | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-617 | Misra C 21.20: pointer from asctime, ctime, gmtime, localtime, localeconv, getenv, setlocale or strerror used after a subsequent call | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-618 | False Negative: Misra C 21.20: Aliased pointer not checked | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-619 | Misra C 22.9: errno shall be tested after calling an errno-setting-function | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-620 | False Negative: Misra C 22.9: Out-of-band error functions | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-621 | False positive: Misra C 17.3: pointer-to-array parameter | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-622 | False Negative: Misra C 8.7: detect definition and usage in same file | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-623 | False Negative: Misra C 22.9: User-defined or third-party functions that set `errno` should be checked | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-626 | Fasle Negative: Misra C: handle id suffix when creating compliance report | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-627 | Improvement: Misra C: display violation variants separately in compliance | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-629 | coverage report for Misra C directives and undecidable rules | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-630 | False Negative: Misra C 21.19: passing to std lib func not detected | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-631 | Improvement: Github Workflow: Add runners and release binary | SafetySecurity | 26.6.0 | Released | |
| ADDON-632 | False Positive: Misra C 22.9: Saving `errno` into a local variable and testing that variable | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-633 | Crash: Misra C | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-634 | False negative: Misra C 21.20: Return value not stored in a plain local variable: violations via struct members | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-635 | False negative: Misra C 21.20: Store variable in array | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-636 | False negative: Misra C 21.20: Pointer inderection | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-637 | Improvement: Compliance report: improve readability | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-638 | False negative: Misra C 21.20: Return value used directly in an expression without being stored | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-639 | False negative: Misra C 11.4: Pointer to pointer | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-641 | False positive: Misra C 13.1: no initializer list | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-643 | False Negative: Misra C 21.19: writing directly through returned pointer not detected | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-644 | Document development process in README.md | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-645 | False Negative: Misra C 21.18: runtime variable not detected | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-646 | False Negative: Misra C 21.18: pointer arithmetic not detected | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-650 | Misra C 22.5: A pointer to a FILE object shall not be dereferenced | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-651 | False negative: Misra C 22.5: Dereferencing a FILE pointer that is not a named variable is not detected | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-652 | False positive: Misra C 22.5: Multi-level FILE pointers produce false positives | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-653 | CI fail: Recent changes to typedef | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-656 | False Positive: Misra C 10.3: positive integral constant expression id | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-658 | False negative: Misra C 22.5: Indirect access through a struct or array member is not detected | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-659 | False Negative: Misra C 17.9: noreturn calls inside nested scopes are not analyzed | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-660 | Misra C 22.7: EOF shall only be compared with the unmodified return value from a Standard Library function capable of returning EOF | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-662 | False positive: Misra C 22.7: Extend the function list | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-663 | Improvement: Misra C 10.4: update suffix to positive-constexpr | SafetySecurity | 26.6.0 | Released | |
| ADDON-664 | CI: Macos runners: tests passes when asserts fails | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-665 | Improve check: Misra C 7.4: struct initialization | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-666 | Misra C 22.8: errno shall be set to zero prior to a call to an errno-setting-function | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-667 | False positive: Misra C 22.8: Call after confirming errno to be zero | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-668 | False negative: Misra C 22.8: Check for out-of-band functions | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-669 | Remove LOC license handling | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-670 | Map "legacyUninitvar" to Misra C Rule 9.1 | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-672 | False Negative: Misra C 19.3: non-assignment writes not detected | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-673 | Misra C 22.10: errno tested after non-errno-setting function | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-675 | CERT INT35: bad handling of wrong parameter | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-676 | CI: fix after dumpfile fix for negative impossible values for unsigned expression | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-679 | False Negative: Misra C 19.3: reading a union member that wasn't set in the current function is not detected | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-681 | False positive: Misra C 22.10: Using errno as argument to a function call does not count as checking | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-684 | False Positive: Cert MSC32-C: namespaced random() function | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-686 | testmisra: remove some unneed suppressions | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-687 | create a test for getInitializerListItems in testutil | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-688 | Create project file for IDE integration | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-690 | compilation; sign conversions | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-692 | CI fix | SafetySecurity | 26.6.0 | Released | |
| ADDON-693 | CI fail: Ubuntu ARM: testcert and selfcheck fails | SafetySecurity | 26.6.0 | Released | |
| ADDON-694 | False Negative: Misra C 21.14: char[] initialized with string literals not detected | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-695 | Misra C 22.14 Thread synchronization objects shall be initialized before being accessed | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-696 | False negative: Misra C 22.14: Condition variable initialization (`cnd_init`) and thread-specific storage creation (`tss_create`) are not detected. | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-699 | False negative: Misra C 22.14: A mutex initialized after `thrd_create` returns in the calling thread, while the spawned thread may already be using it | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-700 | False Negative: Misra C++ 2023 8.2.5: reinterpret_cast<void**>(&..) | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-701 | False positive: Misra C 8.7: main function | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-703 | False Positive : Misra C 11.9 : incorrect warning for NULL macro | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-705 | CI : Remove ci-update-cppcheck.py | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-711 | Crash: Misra C 10.3: getCategory throws esential type wchar_t | SafetySecurity | Major | 26.6.0 | Released |
| ADDON-714 | coverage/fetch.py ; fetch info from cert github repo | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-715 | test-misra-test.py: tweak and move script | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-716 | windows release build fails | SafetySecurity | Cosmetic | 26.6.0 | Released |
| ADDON-36 | bughunting false negative, return value from recv is used as array index (github #778) | SafetySecurity | Major | 26.9.0 | Released |
| ADDON-156 | Improve check: Cert MEM50-CPP: allocate 0 bytes and dereference pointer | SafetySecurity | Major | 26.9.0 | Released |
| ADDON-166 | Improve check: Cert MEM56-CPP: shared_ptr assigned internal pointer of other shared_ptr | SafetySecurity | 26.9.0 | Released | |
| ADDON-168 | Improve check: Cert MSC54-CPP: exception handler with try catch | SafetySecurity | 26.9.0 | Released | |
| ADDON-173 | Improve check: Cert STR53-CPP: return value from function call | SafetySecurity | Major | 26.9.0 | Released |
| ADDON-218 | Improve testing: Replace filter with suppress in tests | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-364 | Bughunting: Hang when a loop with a huge iteration count writes to an array | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-454 | False Negative: Misra C: 8.5: declarations both in source and header | SafetySecurity | Major | 26.9.0 | Released |
| ADDON-487 | False negative: Misra C 2.4: tag in typedef only used implicitly | SafetySecurity | Major | 26.9.0 | Released |
| ADDON-526 | False Positive: Cert EXP36-C: target type is packed (alignment == 1) | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-584 | Mapping : MISRA C 18.1 : negativeIndex etc | SafetySecurity | Major | 26.9.0 | Released |
| ADDON-591 | False Negative : MISRA C 20.6 : #ifdef, #else, #endif directives placed inside arguments of macro M(...) | SafetySecurity | Major | 26.9.0 | Released |
| ADDON-615 | Misra C 17.5: Function argument array size | SafetySecurity | Major | 26.9.0 | Released |
| ADDON-616 | False Negative: Misra C 17.5: Argument pointer variable is not checked | SafetySecurity | Major | 26.9.0 | Released |
| ADDON-624 | False positive: Misra C 17.3: posix library function | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-648 | False positive: Cert C++: DCL56-CPP: Incorrect "recursive initialization" warning | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-657 | False positive: Misra C: Dir 4.6 : support for local typedefs is missing | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-671 | --premium-license-file CLI option fails when license file path contains spaces | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-677 | get-all-warning-ids.py : missing Misra ids | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-689 | False positive: Cert EXP30-C: lambda call | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-697 | False Negative: Misra C 21.14: pointers to null-terminated strings produced by string functions not detected | SafetySecurity | Major | 26.9.0 | Released |
| ADDON-698 | False positive: Cert C: ERR33-C: function's return value explicitly cast to void | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-702 | False negative: Misra C++ 2023: 21.10.1: Report when using features from <cstdarg> header | SafetySecurity | Major | 26.9.0 | Released |
| ADDON-706 | False positive: Misra C 2.2: There shall be no dead code | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-713 | Platform configuration mismatch between UI selection and analysis log | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-717 | False Positive: Misra C++ 8.2.2 reported on function pointer initialization | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-718 | CI: fails, need to add isInsertedBrace token attribute | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-719 | False Positive: Misra C++ 6.7.2 : warning for constexpr | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-722 | Improvement: Remove loc | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-723 | Improvement: Remove simplecpp | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-724 | False positive: Misra C++ 2023 Rule 0.2.4: Template specializations | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-725 | Improvement: FullName refactoring | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-726 | False Positive: Misra C 14.2: write through dereferenced counter flagged as altering counter | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-727 | False positive: Misra C 8.2: named 'void *' parameter | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-728 | CI fail: knownConditionTrueFalse false positive | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-729 | Improve check: Misra C 10.4: add notes for suffix | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-730 | CI: Build binaries with oraclelinux:8 to catch release build issues early | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-732 | False Positive: Cert EXP20-C: explicit equality comparison (foo() == -1) incorrectly flagged | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-734 | False positive: Misra C 17.3: macro offsetof | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-735 | False positive: Misra C 17.8: ptr->a = 42 | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-736 | Misra C++ 0.1.2: Add <symbolName> attribute | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-737 | False Positive: Misra C++ 7.0.5: uintN_t + uint32_t flagged despite operand's final type remaining unsigned int | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-738 | Absolute file path in the xml report even after explicit --relative-path= in commandline | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-739 | Misra C++ 8.2.2: Add <symbolName> attribute | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-740 | Misra C++ 8.2.6: Add <symbolName> attribute | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-741 | False positive: Misra C++ 8.2.5: exception for cast not applied | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-743 | Misra C: 10.3: positive-constexpr should be removed because there is explicit exception | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-744 | dumpdata::load: fix Token::templateArgSourceLocation; filenames from rawtokens are not known yet when tokens are read from xml | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-747 | calculate hash for warnings | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-748 | Improvement: SymbolName | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-749 | Improvement: SymbolName in Autosar | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-751 | False positive: Misra C 8.18: initialized static object in header incorrectly flagged as tentative definition | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-752 | False positive: Misra C dir-4.10 Pragma once | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-753 | CI: Update Github actions to latest major release | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-754 | False positive: Cert C: STR30-C: no string literal | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-755 | Generate Hash for DirectiveToken-based warnings | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-757 | False Positive: MISRA C 17.8: struct member incorrectly flagged as parameter modification | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-761 | False positive: Misra C:2023 14.2: for loop initialization by function | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-762 | False positive: Cert C++ DCL06: usage of __LINE__ in macro | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-763 | False Positive: Misra C 17.3: function declared only via --library reported | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-764 | False positive: cert-dcl37-c and Misra C 21.2 reported for non-file-scope identifiers starting with underscore | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-765 | Checkers report omits CTU-only Misra C rules | SafetySecurity | Major | 26.9.0 | Released |
| ADDON-766 | provide warning hash for CTU warnings | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-767 | Wrong output for CERT MSC30-C | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-771 | False positive: Misra C 5.6: typedef name matching its own associated tag | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-775 | False positive: Misra C 17.11: function call in while loop that modifies variable | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-776 | False negative: Misra C 2.2: Division with 1 | SafetySecurity | Major | 26.9.0 | Released |
| ADDON-777 | Bughunting: noreturn calls not treated as end of branch | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-779 | False positive MISRA C:11.1: Cast of function-pointer parameter to void | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-781 | False positive: Misra C 17.3: function mentioned in posix.cfg | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-782 | doc: limitations in Misra C analysis | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-783 | cppcheck-14988: Add relative path to preprocessor dump | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-784 | Claude: Create replicate skills | SafetySecurity | 26.9.0 | Released | |
| ADDON-785 | Inline suppression comments using bracketed syntax (cppcheck-suppress [...]) are not being propagated to the XML | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-787 | Map invalidFunctionArgStr to Misra C:20xx 21.17 | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-791 | False positive: Misra C 14.2: different structure member is modified in for-loop body | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-799 | False positive: Misra C 12.2: essential type computed as unsigned char instead if unsigned int | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-800 | Misra C 11.4 location: expanded macro | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-801 | ADDON-731 follow up: Failure to handle bitwise operators when determining if a condition depends on volatile memory. | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-802 | cppcheck-15010 ErrorLogger: do not open and read from files unless necessary | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-804 | Hash: calculate hash for CERT PRE warnings | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-805 | GUI release test: gui/manualtest cppcheck-2.22 | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-807 | Misra C++:2023 7.11.2: add symbolname | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-808 | False negative: Misra C 8.2: void* | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-809 | False negative: Misra C++ 2023 7.0.5: Arithmetic (+) between int and unsigned int | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-810 | False positive: Misra C Misra Config: Unknown function | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-813 | warning hash: same hash is calculated for different tokens in a function | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-814 | wrong warning id for directive Misra C++:2023 5.7.2 | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-818 | False positive: MISRA-C-2012.17.11 for function call/post decrement in loop condition | SafetySecurity | 26.9.0 | Released | |
| ADDON-819 | Refactoring: getFunctionName | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-820 | Refactoring: group utility functions | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-821 | Refactoring: Copy pasted code in checkmisra and util | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-824 | Crash: Misra C 22.5: (incomplete code) | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-825 | Crash: Cert EXP36-C: stoll on #pragma pack(push, identifier) | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-828 | False negative: Misra C++ 2023 8.1.1: Lamba in a regular function | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-830 | False negative: Misra C++ 2023 9.5.2: Implicit function call | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-831 | False negative: Misra C++ 2023 10.2.3: Non-variable enums | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-833 | False negative: Misra C++ 2023 21.6.2: New in Member initialization list | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-836 | CI: selfcheck.yml: cache cppcheck | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-837 | Crashes: Misra C 17.5 + 11.9: Deref nullptr | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-838 | Improvement: Compliance report: map ODR to 6.2.1 | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-839 | Improvement: Performance: CtuMisra::isRecursive + hasPersistentSideEffect | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-840 | Improvement: Hashing: handle huge contexts | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-841 | Improvement: CMakeLists.txt: uncomment -Wmissing-declarations | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-842 | False positive: MISRA C 17.12 with `_Generic` | SafetySecurity | 26.9.0 | Released | |
| ADDON-843 | False positive: CERT MSC40-C: Warning does not apply to C++. | SafetySecurity | 26.9.0 | Released | |
| ADDON-844 | False positive: misra-config in sizeof/offsetof | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-845 | False positive: CERT MSC40-C with const variable | SafetySecurity | 26.9.0 | Released | |
| ADDON-846 | AI : jira-fetch-support skill does not allow my valid API token because the scope did not match | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-848 | crash when checking cgal in cert msc32 | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-850 | Improvement: Performance: getFunctionCallTokenFromArgument | SafetySecurity | 26.9.0 | Released | |
| ADDON-851 | Improvement: Performance: when checking praat | SafetySecurity | 26.9.0 | Released | |
| ADDON-855 | False positive: CERT DCL56-CPP | SafetySecurity | 26.9.0 | Released | |
| ADDON-856 | False positive: AUTOSAR A5-2-2 with `(void)` | SafetySecurity | 26.9.0 | Released | |
| ADDON-857 | Refactoring: Move some reused functions to util | SafetySecurity | Cosmetic | 26.9.0 | Released |
| ADDON-859 | False positive: AUTOSAR A5-2-2 in template arguments | SafetySecurity | 26.9.0 | Released | |
| ADDON-863 | ADDON-859 follow up: Additional test cases | SafetySecurity | 26.9.0 | Released | |
| ADDON-864 | False positive: CERT EXP34-C for overloaded arrow operator | SafetySecurity | 26.9.0 | Released | |
| ADDON-865 | ADDON-845 follow up: Additional test case (CERT MSC40-C FP) | SafetySecurity | 26.9.0 | Released | |
| ADDON-731 | False positive: Misra C 17.11 : function is returning | SafetySecurity | Cosmetic | TBD | Pending release |
| ADDON-789 | False positive: Misra C 22.5:passing FILE * member to fclose() and when comparing FILE * member with NULL | SafetySecurity | Cosmetic | TBD | Pending release |
| ADDON-797 | False positive: Misra C 14.4, 17.11: call through _Generic function selection | SafetySecurity | Cosmetic | TBD | Pending release |
| ADDON-812 | False negative: Misra C++ 2023 7.0.5: comparison operators between signed and unsigned | SafetySecurity | Cosmetic | TBD | Pending release |
| ADDON-829 | False negative: Misra C++ 2023 9.3.1: Add else/if coverage | SafetySecurity | Cosmetic | TBD | Pending release |
| ADDON-860 | False positive: Misra C Dir 4.10: #if !defined(X) | SafetySecurity | Cosmetic | TBD | Pending release |
| ADDON-861 | False positive: Misra C 10.3: uint8_t x = 0xFF; | SafetySecurity | Cosmetic | TBD | Pending release |
| ADDON-867 | Implement AUTOSAR A12-1-4 in premiumaddon | SafetySecurity | TBD | Pending release | |
| ADDON-868 | ADDON-522 follow up: Additional test case | SafetySecurity | TBD | Pending release | |
| ADDON-869 | False positive: Misra C++ 7-3-1 for template instantiation | SafetySecurity | TBD | Pending release | |
| ADDON-871 | False positive: Autosar A13-2-3 for typedef used in template | SafetySecurity | TBD | Pending release | |
| ADDON-874 | AI code review | SafetySecurity | Cosmetic | TBD | Pending release |
| ADDON-876 | validateLicense: Avoid hardware info lookup for enterprise licenses | SafetySecurity | TBD | Pending release | |
| ADDON-877 | False Negative: Misra C++ 2023: 24.5.2: memchr and wide/_s variants (TC1) | SafetySecurity | Major | TBD | Pending release |
| ADDON-890 | False positive: Misra C++ 2023 9.6.2: goto to label in another case of the same switch (TC1) | SafetySecurity | Cosmetic | TBD | Pending release |
| ADDON-891 | False positive: Misra C++ 2023 15.0.1: unmovable base with protected copy/move members (TC1 example) | SafetySecurity | Cosmetic | TBD | Pending release |
| ADDON-895 | False Negative: Misra C++ 2023: 6.0.4: token main followed by ( (TC1) | SafetySecurity | Major | TBD | Pending release |
| ADDON-899 | False Negative: Misra C++ 2023: 6.8.3: local static initialized with address of local (TC1) | SafetySecurity | Major | TBD | Pending release |
| ADDON-906 | False Negative: Misra C++ 2023: 7.0.3: switch on character with integer case label (TC1) | SafetySecurity | Major | TBD | Pending release |
| ADDON-909 | False Negative: Misra C++ 2023: 9.5.1: loop counter of character type, address of loop counter (TC1) | SafetySecurity | Major | TBD | Pending release |
| ADDON-910 | False Negative: Misra C++ 2023: 11.6.1: variable assigned in the statement after its declaration | SafetySecurity | Major | TBD | Pending release |
| ADDON-914 | False Negative: Misra C++ 2023: 21.6.2: get_temporary_buffer, return_temporary_buffer, aligned_alloc (TC1) | SafetySecurity | Major | TBD | Pending release |
| ADDON-916 | False Negative: Misra C++ 2023: 21.6.4: operator delete[] and non-corresponding operators (TC1) | SafetySecurity | Major | TBD | Pending release |
| ADDON-919 | 26.9.0: update misra coverage documents | SafetySecurity | Cosmetic | TBD | Pending release |
| ADDON-920 | coverage.py: remove symbol: from warning text | SafetySecurity | Cosmetic | TBD | Pending release |
| ADDON-926 | CI fails: latest Cppcheck HEAD 2026-10-04 breaks testcert | SafetySecurity | Cosmetic | TBD | Pending release |
| ADDON-927 | CI: remove macos-14 runners | SafetySecurity | TBD | Pending release | |
| ADDON-929 | AI: Setup Jira support agent in AWS | SafetySecurity | TBD | Pending release | |
| ADDON-930 | claude ai review | SafetySecurity | Cosmetic | TBD | Pending release |
| ADDON-931 | False positive: Unread variable with `[[maybe_unused]]` | SafetySecurity | TBD | Pending release | |
| ADDON-932 | CI: check constness | SafetySecurity | Cosmetic | TBD | Pending release |
| ADDON-933 | False positive: `unusedPrivateMember` with `[[maybe_unused]]` | SafetySecurity | TBD | Pending release | |
| ADDON-934 | False negative: `unusedPrivateMember` with implicitly private member | SafetySecurity | TBD | Pending release | |
| ADDON-942 | CI: check that PR title matches the Jira issue summary | SafetySecurity | Cosmetic | TBD | Pending release |
| ADDON-945 | HIS metrics: cyclomaticComplexity should count &&, || and ?:, add cyclomaticComplexityMcCabe | SafetySecurity | TBD | Pending release | |
| ADDON-950 | CI: claude review, skip if other action fails. | SafetySecurity | Cosmetic | TBD | Pending release |
| ADDON-1 | Detect hang (CVE-2021-39929) | SafetySecurity | |||
| ADDON-2 | detect std::optional misuse | SafetySecurity | |||
| ADDON-3 | New check: check usage of written buffer data | SafetySecurity | |||
| ADDON-4 | Detect uninitMember for conditional initialization | SafetySecurity | |||
| ADDON-5 | detect uninit member usage in subfunction (assignment operator) | SafetySecurity | |||
| ADDON-6 | Detect null pointer dereference, comparing functions | SafetySecurity | |||
| ADDON-7 | False positive: bug hunting | SafetySecurity | |||
| ADDON-8 | bug hunting, false negative, pointer incremented in loop | SafetySecurity | Major | ||
| ADDON-9 | Detect loss of precision: return | SafetySecurity | Major | ||
| ADDON-10 | Detect array index underrun: fgets | SafetySecurity | Major | ||
| ADDON-35 | Detect use after free. Global pointer. Synthetic testcase (github #216) | SafetySecurity | Major | ||
| ADDON-37 | release-macos.yml: create conan/brew package (github #967) | SafetySecurity | Cosmetic | ||
| ADDON-38 | release-macos.yml: Package Cppcheck-GUI (github #968) | SafetySecurity | Cosmetic | ||
| ADDON-39 | New check: add warning/style checker that suggests virtual destructors for base classes (github #1070) | SafetySecurity | Cosmetic | ||
| ADDON-40 | False negative: uninitvar not reported, independent conditions (github #1125) | SafetySecurity | Major | ||
| ADDON-41 | Checkers report; Clarify the requirements for premium checkers (github #1145) | SafetySecurity | Cosmetic | ||
| ADDON-44 | Add an ability to enable multiple Misra standards at the same time (github #1273) | SafetySecurity | Cosmetic | ||
| ADDON-47 | False negative: Cert C ERR33: use whole program analysis (github #1423) | SafetySecurity | Major | ||
| ADDON-50 | license file path, environment variable (github #309) | SafetySecurity | Cosmetic | ||
| ADDON-55 | code metrics, anti patterns (github #665) | SafetySecurity | Cosmetic | ||
| ADDON-56 | New check: class with unsafe lifetime interface. detect problems using CTU analysis. (github #671) | SafetySecurity | Cosmetic | ||
| ADDON-57 | New check: Dangerous code, returning reference to member in method marked with non const && (github #840) | SafetySecurity | Cosmetic | ||
| ADDON-58 | Bug hunting: Detect array index after check (github #865) | SafetySecurity | Major | ||
| ADDON-59 | Bug hunting: Detect array index out of bounds. array index assigned in for loop and used after the loop. (github #866) | SafetySecurity | Major | ||
| ADDON-60 | Bug hunting: Check if pointer is null after dereferencing it (github #872) | SafetySecurity | Major | ||
| ADDON-62 | CI: Run pylint on our python scripts #999 | SafetySecurity | Cosmetic | ||
| ADDON-64 | bughunting: unsigned integer overflow for struct member (github #1250) | SafetySecurity | Major | ||
| ADDON-65 | Bughunting: check that containers are accessed with valid index (github #1257) | SafetySecurity | Major | ||
| ADDON-66 | Bughunting: possible array index out of bounds (github #1262) | SafetySecurity | Major | ||
| ADDON-67 | Bughunting: integer overflow (github #1263) | SafetySecurity | Major | ||
| ADDON-123 | False negative: Cert int30-c: improve data flow analysis | SafetySecurity | Major | ||
| ADDON-124 | False positive: Cert INT30-c: subtraction in loop | SafetySecurity | Cosmetic | ||
| ADDON-132 | compliance-report: optionally group violations by level/classification | SafetySecurity | Cosmetic | ||
| ADDON-147 | New check: subtracting pointers in subfunction (cert ctr54) | SafetySecurity | Major | ||
| ADDON-148 | New check: Cert CTR55-CPP: assume containers have arbitrary size | SafetySecurity | Major | ||
| ADDON-153 | Improve check: Cert EXP54-CPP: return reference from lambda through function | SafetySecurity | Major | ||
| ADDON-161 | Improve check: Cert MEM51-CPP: mismatching allocation and deallocation, overloaded new/delete | SafetySecurity | Major | ||
| ADDON-162 | Improve check: Cert MEM53-CPP: non compliant example 7.4.3, std::allocator usage | SafetySecurity | Major | ||
| ADDON-165 | Improve check: Cert MEM54-CPP: placement new data does not have extra overhead | SafetySecurity | Major | ||
| ADDON-170 | Improve check: Cert STR50-CPP: std::istream::read may not 0-terminate string | SafetySecurity | Major | ||
| ADDON-172 | Improve check: Cert STR51-CPP: using std::getenv() result without checking if nullptr was returned | SafetySecurity | Major | ||
| ADDON-175 | Improve check: Cert Exp54-CPP: std::get_temporary_buffer => std::copy destination | SafetySecurity | Major | ||
| ADDON-196 | Add checker that warns about std::unreachable that can be executed | SafetySecurity | Cosmetic | ||
| ADDON-232 | False positive: Misra C++ 21.6.1: using storage_type = std::array in template | SafetySecurity | Cosmetic | ||
| ADDON-296 | Windows ZIP distribution so a installation will not be needed in CI | SafetySecurity | Cosmetic | ||
| ADDON-337 | False negative: Misra C 2023 Rule 9.1: Pdf example, bughunting | SafetySecurity | Major | ||
| ADDON-338 | False negative: Misra C 2023 Rule 9.1: Pdf example | SafetySecurity | Major | ||
| ADDON-369 | New check: Reading string that is not zero-terminated after fread | SafetySecurity | Cosmetic | ||
| ADDON-375 | manually specified license file doesnt work with different path separators | SafetySecurity | Cosmetic | ||
| ADDON-396 | report cwe number(s) for premium warnings | SafetySecurity | Cosmetic | ||
| ADDON-404 | New check: Cert DCL00-C: const qualify immutable non-pointer objects | SafetySecurity | Cosmetic | ||
| ADDON-422 | False positive: Cert ARR30-C: impossible value below a switch that returns | SafetySecurity | Cosmetic | ||
| ADDON-423 | Is bughunting 5x slower than in cppcheck-2.5 | SafetySecurity | Cosmetic | ||
| ADDON-430 | False negative: Bughunting: CVE-2025-2757: calculated length is not checked | SafetySecurity | Major | ||
| ADDON-450 | New check: readability, simplify code that find value in set/map and erase it | SafetySecurity | Cosmetic | ||
| ADDON-451 | New check: readability, string substring | SafetySecurity | Cosmetic | ||
| ADDON-452 | New check: readability, handwritten loops that duplicate std::string::find.. functions | SafetySecurity | Cosmetic | ||
| ADDON-453 | New check: readability, suggest replacing container::find with container::count or container::emplace or std::any_of etc | SafetySecurity | Cosmetic | ||
| ADDON-475 | Documentation: Zephyr generate compiler macros using -m.. flags etc | SafetySecurity | Cosmetic | ||
| ADDON-481 | False negative: Misra C 13.4: Chained assignment | SafetySecurity | Major | ||
| ADDON-497 | distinguish cert rules/recommendations | SafetySecurity | Cosmetic | ||
| ADDON-517 | New check: Misra C 9.1: implement extra checker in checkmisra.cpp | SafetySecurity | Major | ||
| ADDON-542 | False positive MISRA C: Rule 5.5: macro of same name exists only in mutually exclusive conditional branch | SafetySecurity | Cosmetic | ||
| ADDON-545 | add fuzzer for saxreader | SafetySecurity | Cosmetic | ||
| ADDON-566 | False Negative : MISRA C 9.1 : Variable read before deterministic assignment | SafetySecurity | Major | ||
| ADDON-567 | False Negative : MISRA C: Rule 9.1 : Variable read before valid assignment | SafetySecurity | Major | ||
| ADDON-583 | False Negative : MISRA C 18.1 : Pointer dereferencing memory one past end of array | SafetySecurity | Major | ||
| ADDON-587 | False Negative : MISRA C 18.1 : pointer arithmetic on structure members | SafetySecurity | Major | ||
| ADDON-588 | False Negative : MISRA C 18.1 : Pointer arithmetic accessing memory outside bounds of structure objects | SafetySecurity | Major | ||
| ADDON-589 | False Negative : MISRA C 18.1 : Pointer arithmetic moving beyond one-past-end boundary of array | SafetySecurity | Major | ||
| ADDON-590 | False Negative : MISRA C 18.2 : Pointer subtraction on pointers without guaranteed relationship to same array | SafetySecurity | Major | ||
| ADDON-593 | False Negative : MISRA C 20.6 : #define directive placed inside arguments of macro call null(X) | SafetySecurity | Major | ||
| ADDON-597 | False Negative : MISRA C 22.2 : Memory block freed twice via multiple pointers referencing same block | SafetySecurity | Major | ||
| ADDON-598 | False Negative : MISRA C 22.2 : realloc called on freed pointer attempting to access invalid memory block | SafetySecurity | Major | ||
| ADDON-599 | False Negative : MISRA C 22.6 : File pointer file accessed or assigned after being closed while indeterminate | SafetySecurity | Major | ||
| ADDON-612 | False positive: Misra C 20.12: FLAG_BASE macro is not an operand of ## | SafetySecurity | Cosmetic | ||
| ADDON-640 | cppcheck-htmlreport shows "Source file not found" error for premium-licenseExpiresSoon entry | SafetySecurity | Cosmetic | ||
| ADDON-649 | Recategorisations of Misra warnings | SafetySecurity | Cosmetic | ||
| ADDON-654 | False Negative: Misra C 21.17: gets(buf) not checked | SafetySecurity | Major | ||
| ADDON-655 | False Negative: Misra C 21.17: Pointer arithmetic access not checked | SafetySecurity | Major | ||
| ADDON-678 | Very slow CTU analysis in Misra C 2025 | SafetySecurity | Cosmetic | ||
| ADDON-680 | False Negative: Misra C 19.3: violations that cross a block boundary are silently missed | SafetySecurity | Major | ||
| ADDON-682 | custom behavior when license is about to expire | SafetySecurity | Cosmetic | ||
| ADDON-683 | False Negative: Misra C 19.3: violations after `break`, `continue`, and `goto` are not detected | SafetySecurity | Major | ||
| ADDON-704 | False Negative : Misra C 22.1 : missing NULL redefine if header isn't included | SafetySecurity | Major | ||
| ADDON-707 | False positive: Misra C 8.9: referenced in multiple source files | SafetySecurity | Cosmetic | ||
| ADDON-708 | False positive: Misra C 20.15: Reported in inactive header | SafetySecurity | Cosmetic | ||
| ADDON-710 | False positive: Misra C 14.2: __builtin calls without side effects | SafetySecurity | Cosmetic | ||
| ADDON-712 | False Positive : Misra C 8.9 : ignores cross TU usage | SafetySecurity | Cosmetic | ||
| ADDON-733 | False positive: Misra C 20.12: macro with multiple arguments one is used as # operator other undergoes further replacements | SafetySecurity | Major | ||
| ADDON-750 | Whole program analysis ignores launguage gating for Misra C/C++ | SafetySecurity | Cosmetic | ||
| ADDON-756 | --project=<.cppcheck> fails with "no C or C++ source files found" when project file uses <importproject> | SafetySecurity | Cosmetic | ||
| ADDON-758 | Not getting comments for the suppressons mentioned in the suppression list in the compliance report. | SafetySecurity | Cosmetic | ||
| ADDON-760 | MISRA Rule 5.9 error reports differ from one execution to another | SafetySecurity | Cosmetic | ||
| ADDON-768 | False negative INT30-C , subtracting unchecked parameters (CVE-2026-14610) | SafetySecurity | Major | ||
| ADDON-770 | cppcheck-14462 False positive: knownConditionTrueFalse (address of buffer element, while loop) | SafetySecurity | Cosmetic | ||
| ADDON-772 | cppcheck-14970 Syntax error reported for valid constructor declaration after union member | SafetySecurity | Cosmetic | ||
| ADDON-773 | cppcheck-14979 syntax error occurs in static_cast<type> | SafetySecurity | Cosmetic | ||
| ADDON-774 | HIS metrics: ternary operator | SafetySecurity | Cosmetic | ||
| ADDON-778 | False positive MISRA C:19.3: nested union member | SafetySecurity | Cosmetic | ||
| ADDON-780 | False positive: missingReturn: return branches in a function template | SafetySecurity | Cosmetic | ||
| ADDON-786 | cleanup/refactor uninitvar checking | SafetySecurity | Cosmetic | ||
| ADDON-790 | False positive: Misra C 8.4: function parameter uses pointer to array typedef | SafetySecurity | Cosmetic | ||
| ADDON-792 | cppcheck-13290 import -isystem paths from compile_commands.json | SafetySecurity | Cosmetic | ||
| ADDON-794 | cppcheck-14997 Do not load a file when its #include is inside an #if X scope excluded by -UX | SafetySecurity | Cosmetic | ||
| ADDON-795 | Setup new VM for trac.cppcheck.net | SafetySecurity | Cosmetic | ||
| ADDON-796 | cppcheck-15001 Fix hang in valueflow | SafetySecurity | Cosmetic | ||
| ADDON-803 | Improvement: Checkers: register checkers in a more reliable way | SafetySecurity | |||
| ADDON-806 | Misra C++ 2023: Technical Corrigenda 1 | SafetySecurity | Cosmetic | ||
| ADDON-811 | False negative: Misra C++:2023: no valuetype | SafetySecurity | Major | ||
| ADDON-815 | False negative: Misra C++ 2023 7.0.5: compound assignment and bitwise operators | SafetySecurity | Major | ||
| ADDON-816 | False negative: Misra C++ 2023 7.0.5: type category change to float point | SafetySecurity | Major | ||
| ADDON-817 | False negative: Misra C++ 2023 7.0.5: conditional operator | SafetySecurity | Major | ||
| ADDON-822 | False negative: Misra C++ 2023 0.1.2: Library functions | SafetySecurity | Cosmetic | ||
| ADDON-823 | False negative: Misra C++ 2023 6.9.1: Function params | SafetySecurity | Cosmetic | ||
| ADDON-826 | False negative: Misra C++ 2023 7.11.2: memcpy | SafetySecurity | Cosmetic | ||
| ADDON-827 | False negative: Misra C++ 2023 7.11.2: Stream operator | SafetySecurity | Cosmetic | ||
| ADDON-832 | False negative: Misra C++ 2023 18.4.1: Functions passed to extern "C" | SafetySecurity | Cosmetic | ||
| ADDON-834 | Improvement: Misra C++ 2023 21.10.3: Warn on usage instead of include | SafetySecurity | Cosmetic | ||
| ADDON-835 | Improvement: Misra C++ 2023 30.0.1: Warn on usage instead of include | SafetySecurity | Cosmetic | ||
| ADDON-847 | Improvement: Claude skills: Refactor and add batch + comment skills. | SafetySecurity | |||
| ADDON-849 | False positive: opensource knownArgument with function pointer | SafetySecurity | Cosmetic | ||
| ADDON-852 | Improvement: Refactor getFunctionCallTokenFromArgument to only accecpt arguments | SafetySecurity | Cosmetic | ||
| ADDON-853 | False negative: Misra C 17.12: function address in initializer list | SafetySecurity | Cosmetic | ||
| ADDON-854 | False negative: Misra C 10.3: function parameter | SafetySecurity | Major | ||
| ADDON-858 | False negative: Misra C 2.2: use macro with empty replacement list | SafetySecurity | Major | ||
| ADDON-866 | cppcheck-suppress-macro is ignored with relative paths | SafetySecurity | Cosmetic | ||
| ADDON-870 | inline file/block suppressions ignored for whole program findings with -j > 1 | SafetySecurity | Cosmetic | ||
| ADDON-872 | ADDON-735 follow up: Additional test case | SafetySecurity | |||
| ADDON-873 | internalError "failed to open" .a1 in --cppcheck-build-dir aborts the whole file | SafetySecurity | |||
| ADDON-875 | False positive: Misra C++ 2023 6.4.2: CRTP pattern (TC1 exception) | SafetySecurity | Cosmetic | ||
| ADDON-878 | False Negative: Misra C++ 2023: 0.1.1, 10.1.1: unreadVariable/constParameterReference not enabled by --premium=misra-c++-2023 | SafetySecurity | Major | ||
| ADDON-879 | False Negative: Misra C++ 2023: 28.6.4: std::remove result not attributed to rule (uselessCallsRemove not mapped) | SafetySecurity | Major | ||
| ADDON-880 | False positive: Misra C++ 2023 21.2.2: fgetwc and fputwc (TC1) | SafetySecurity | Cosmetic | ||
| ADDON-881 | False positive: Misra C++ 2023 5.13.2: escape sequence terminated by space (TC1) | SafetySecurity | Cosmetic | ||
| ADDON-882 | False positive: Misra C++ 2023 6.8.3: structured binding to reference member (TC1) | SafetySecurity | Cosmetic | ||
| ADDON-883 | False positive: Misra C++ 2023 6.8.4: deleted const rvalue overload not recognized | SafetySecurity | Cosmetic | ||
| ADDON-884 | False positive: Misra C++ 2023 6.9.2: parameter of literal operator (TC1) | SafetySecurity | Cosmetic | ||
| ADDON-885 | False positive: Misra C++ 2023 7.0.1: bool and bit-field of length 1 (TC1) | SafetySecurity | Cosmetic | ||
| ADDON-886 | False positive: Misra C++ 2023 7.0.2: class with operator bool used as condition (TC1) | SafetySecurity | Cosmetic | ||
| ADDON-887 | False positive: Misra C++ 2023 7.0.3: cast of character to void (TC1) | SafetySecurity | Cosmetic | ||
| ADDON-888 | False positive: Misra C++ 2023 8.1.2: transient lambda | SafetySecurity | Cosmetic | ||
| ADDON-889 | False positive: Misra C++ 2023 8.2.11: class with non-trivial copy assignment (TC1) | SafetySecurity | Cosmetic | ||
| ADDON-892 | False positive: Misra C++ 2023 19.3.4: macro argument that is a type | SafetySecurity | Cosmetic | ||
| ADDON-893 | False Negative: Misra C++ 2023: 21.2.2: wide character string functions (TC1) | SafetySecurity | Major | ||
| ADDON-894 | False Negative: Misra C++ 2023: 5.13.2: escape sequence terminated by ' (TC1) | SafetySecurity | Major | ||
| ADDON-896 | False Negative: Misra C++ 2023: 6.2.2: declarations in different translation units | SafetySecurity | Major | ||
| ADDON-897 | False Negative: Misra C++ 2023: 6.2.3: location of explicit specialization (TC1) | SafetySecurity | Major | ||
| ADDON-898 | False Negative: Misra C++ 2023: 6.5.2: static variable in global namespace | SafetySecurity | Major | ||
| ADDON-900 | False Negative: Misra C++ 2023: 6.8.4: cv-qualification of deleted rvalue overload (TC1) | SafetySecurity | Major | ||
| ADDON-901 | False Negative: Misra C++ 2023: 6.9.1: int vs int32_t (TC1 example) | SafetySecurity | Major | ||
| ADDON-902 | False Negative: Misra C++ 2023: 0.1.1: unnecessary writes (TC1 examples) | SafetySecurity | Major | ||
| ADDON-903 | False Negative: Misra C++ 2023: 0.1.2: std::mutex::try_lock (TC1 example) | SafetySecurity | Major | ||
| ADDON-904 | False Negative: Misra C++ 2023: 0.2.3: unused class/enum/union and type alias (TC1) | SafetySecurity | Major | ||
| ADDON-905 | False Negative: Misra C++ 2023: 4.6.1: volatile access (TC1) | SafetySecurity | Major | ||
| ADDON-907 | False Negative: Misra C++ 2023: 7.0.6: converting transfers other than assignment (TC1) | SafetySecurity | Major | ||
| ADDON-908 | False Negative: Misra C++ 2023: 7.11.3: conversion of lambda to pointer-to-function (TC1) | SafetySecurity | Major | ||
| ADDON-911 | False Negative: Misra C++ 2023: 15.1.4: inherited constructor (TC1) | SafetySecurity | Major | ||
| ADDON-912 | False Negative: Misra C++ 2023: Dir 15.8.1: self move-assignment | SafetySecurity | Major | ||
| ADDON-913 | False Negative: Misra C++ 2023: 18.4.1: functions directly called in initializers, deallocation functions (TC1) | SafetySecurity | Major | ||
| ADDON-915 | False Negative: Misra C++ 2023: 21.6.3: get_temporary_buffer, return_temporary_buffer (TC1) | SafetySecurity | Major | ||
| ADDON-917 | False Negative: Misra C++ 2023: 28.6.3: potentially moved-from state (TC1) | SafetySecurity | Major | ||
| ADDON-918 | CI: code/comments spell checking | SafetySecurity | Cosmetic | ||
| ADDON-921 | Add `--<standard>-categories=...` options | SafetySecurity | |||
| ADDON-922 | False positive: AUTOSAR A3-3-1: extern "C" function defined inside a namespace | SafetySecurity | |||
| ADDON-923 | saxreader.cpp: handle nested elements with same names better | SafetySecurity | Cosmetic | ||
| ADDON-924 | False positive: Cert exp53: selfcheck , delete pointer after push_back | SafetySecurity | |||
| ADDON-925 | False positive: Misra C++:2023 10.2.3: initializing enum with symbol | SafetySecurity | Cosmetic | ||
| ADDON-928 | AI: Create specialized SKILLS for reviewing code | SafetySecurity | |||
| ADDON-935 | False positive: AUTOSAR A3-3-1: definition using a using-declared type alias not matched with header decleration | SafetySecurity | Major | ||
| ADDON-936 | Improvement: AI agent: add SKILL to compare if addon ticket already exists | SafetySecurity | |||
| ADDON-937 | Misra C: Add option to configure that a typedef is essentially bool | SafetySecurity | Cosmetic | ||
| ADDON-938 | MISRA C 2.5: header guard macro with #if !defined | SafetySecurity | Cosmetic | ||
| ADDON-939 | False negative: Misra C 10.3: arguments to standard library functions | SafetySecurity | Major | ||
| ADDON-940 | False negative: Misra C 10.3: unsigned constant assigned to signed type | SafetySecurity | Major | ||
| ADDON-941 | Misra C Dir 4.9: report at the macro definition | SafetySecurity | Cosmetic | ||
| ADDON-943 | HIS metrics: HISPath overflows | SafetySecurity | |||
| ADDON-944 | HIS metrics: remove duplicate function metrics (functions in headers used in several TUs) | SafetySecurity | |||
| ADDON-946 | HIS metrics: add physical lines per file | SafetySecurity | |||
| ADDON-947 | Improve Claude review | SafetySecurity | |||
| ADDON-948 | False positive: Misra C++ 2023 7.11.3: function address &f as template argument | SafetySecurity | Major | ||
| ADDON-949 | False positive: Misra C++ 2023 0.2.4: function used only as template argument | SafetySecurity | |||
| ADDON-951 | Misra C 11.4: symbol (macro name) missing since 26.9.0, breaks symbolName suppressions | SafetySecurity | Cosmetic | ||
| ADDON-952 | Cppcheck-GUI: recheck removes unselected files results | SafetySecurity | Cosmetic |