Misra C 2012 coverage

Total rules: 221

Number of implemented: 206

GuidelineTextCppcheck ID(s)
Dir 1.1Any implementation-defined behaviour on which the output of the program depends shall be documented and understood
Dir 2.1All source files shall compile without any compilation errors
Dir 3.1All code shall be traceable to documented requirements
Dir 4.1Run-time failures shall be minimized
Dir 4.2All usage of assembly language should be documented
Dir 4.3Assembly language shall be encapsulated and isolatedpremium-misra-c-2012-dir-4.3
Dir 4.4Sections of code should not be "commented out"premium-misra-c-2012-dir-4.4
Dir 4.5Identifiers in the same name space with overlapping visibility should be typographically unambiguouspremium-misra-c-2012-dir-4.5
Dir 4.6typedefs that indicate size and signedness should be used in place of the basic numerical typespremium-misra-c-2012-dir-4.6
Dir 4.7If a function returns error information, then that error information shall be tested
Dir 4.8If a pointer to a structure or union is never dereferenced within a translation unit, then the implementation of the object should be hidden
Dir 4.9A function should be used in preference to a function-like macro where they are interchangeablepremium-misra-c-2012-dir-4.9
Dir 4.10Precautions shall be taken in order to prevent the contents of a header file being included more than once
Dir 4.11The validity of values passed to library functions shall be checked
Dir 4.12Dynamic memory allocation shall not be usedpremium-misra-c-2012-dir-4.12
Dir 4.13Functions which are designed to provide operations on a resource should be called in an appropriate sequence
Dir 4.14The validity of values received from external sources shall be checked
Dir 4.15Evaluation of floating-point expressions shall not lead to the undetected generation of infinities and NaNs
Dir 5.1There shall be no data races between threads
Dir 5.2There shall be no deadlocks between threads
Dir 5.3There shall be no dynamic thread creation
1.1The program shall contain no violations of the standard C syntax and constraints, and shall not exceed the implementation's translation limitssyntaxError
1.2Language extensions should not be usedpremium-misra-c-2012-1.2
1.3There shall be no occurrence of undefined or critical unspecified behaviourerror
1.4Emergent language features shall not be usedpremium-misra-c-2012-1.4
1.5Obsolescent language features shall not be usedpremium-misra-c-2012-1.5
2.1A project shall not contain unreachable codeduplicateBreak
unreachableCode
2.2A project shall not contain dead codeconstStatement
redundantCondition
redundantAssignment
redundantAssignInSwitch
unreadVariable
premium-misra-c-2012-2.2
2.3A project should not contain unused type declarationspremium-misra-c-2012-2.3
2.4A project should not contain unused tag declarationspremium-misra-c-2012-2.4
2.5A project should not contain unused macro definitionspremium-misra-c-2012-2.5
2.6A function should not contain unused label declarationsunusedLabel
2.7A function should not contain unused parameterspremium-misra-c-2012-2.7
2.8A project should not contain unused object definitionsunusedVariable
3.1The character sequences /* and // shall not be used within a commentpremium-misra-c-2012-3.1
3.2Line-splicing shall not be used in // commentspremium-misra-c-2012-3.2
4.1Octal and hexadecimal escape sequences shall be terminatedpremium-misra-c-2012-4.1
4.2Trigraphs should not be usedpremium-misra-c-2012-4.2
5.1External identifiers shall be distinctpremium-misra-c-2012-5.1
5.2Identifiers declared in the same scope and name space shall be distinctpremium-misra-c-2012-5.2
5.3An identifier declared in an inner scope shall not hide an identifier declared in an outer scopeshadowVariable
5.4Macro identifiers shall be distinctpremium-misra-c-2012-5.4
5.5Identifiers shall be distinct from macro namespremium-misra-c-2012-5.5
5.6A typedef name shall be a unique identifierpremium-misra-c-2012-5.6
5.7A tag name shall be a unique identifierpremium-misra-c-2012-5.7
5.8Identifiers that define objects or functions with external linkage shall be uniquepremium-misra-c-2012-5.8
5.9Identifiers that define objects or functions with internal linkage should be uniquepremium-misra-c-2012-5.9
6.1Bit-fields shall only be declared with an appropriate typepremium-misra-c-2012-6.1
6.2Single-bit named bit-fields shall not be of a signed typepremium-misra-c-2012-6.2
6.3A bit field shall not be declared as a member of a unionpremium-misra-c-2012-6.3
7.1Octal constants shall not be usedpremium-misra-c-2012-7.1
7.2A "u" or "U" suffix shall be applied to all integer constants that are represented in an unsigned typepremium-misra-c-2012-7.2
7.3The lowercase character "l" shall not be used in a literal suffixpremium-misra-c-2012-7.3
7.4A string literal shall not be assigned to an object unless the object's type is "pointer to const-qualified char"premium-misra-c-2012-7.4
7.5The argument of an integer constant macro shall have an appropriate formpremium-misra-c-2012-7.5
7.6The small integer variants of the minimum-width integer constant macros shall not be usedpremium-misra-c-2012-7.6
8.1Types shall be explicitly specifiedpremium-misra-c-2012-8.1
8.2Function types shall be in prototype form with named parameterspremium-misra-c-2012-8.2
8.3All declarations of an object or function shall use the same names and type qualifiersfuncArgNamesDifferent
premium-misra-c-2012-8.3
8.4A compatible declaration shall be visible when an object or function with external linkage is definedpremium-misra-c-2012-8.4
8.5An external object or function shall be declared once in one and only one filepremium-misra-c-2012-8.5
8.6An identifier with external linkage shall have exactly one external definitionpremium-misra-c-2012-8.6
8.7Functions and objects should not be defined with external linkage if they are referenced in only one translation unitpremium-misra-c-2012-8.7
8.8The static storage class specifier shall be used in all declarations of objects and functions that have internal linkagepremium-misra-c-2012-8.8
8.9An object should be declared at block scope if its identifier only appears in a single functionpremium-misra-c-2012-8.9
8.10An inline function shall be declared with the static storage classpremium-misra-c-2012-8.10
8.11When an array with external linkage is declared, its size should be explicitly specifiedpremium-misra-c-2012-8.11
8.12Within an enumerator list, the value of an implicitly-specified enumeration constant shall be uniquepremium-misra-c-2012-8.12
8.13A pointer should point to a const-qualified type whenever possibleconstParameterPointer
8.14The restrict type qualifier shall not be usedpremium-misra-c-2012-8.14
8.15All declarations of an object with an explicit alignment specification shall specify the same alignmentpremium-misra-c-2012-8.15
8.16The alignment specification of zero should not appear in an object declarationpremium-misra-c-2012-8.16
8.17At most one explicit alignment specifier should appear in an object declarationpremium-misra-c-2012-8.17
9.1The value of an object with automatic storage duration shall not be read before it has been setuninitvar
9.2The initializer for an aggregate or union shall be enclosed in bracespremium-misra-c-2012-9.2
9.3Arrays shall not be partially initializedpremium-misra-c-2012-9.3
9.4An element of an object shall not be initialized more than oncepremium-misra-c-2012-9.4
9.5Where designated initializers are used to initialize an array object the size of the array shall be specified explicitlypremium-misra-c-2012-9.5
9.6An initializer using chained designators shall not contain initializers without designatorspremium-misra-c-2012-9.6
9.7Atomic objects shall be appropriately initialized before being accessedpremium-misra-c-2012-9.7
10.1Operands shall not be of an inappropriate essential typepremium-misra-c-2012-10.1
10.2Expressions of essentially character type shall not be used inappropriately in addition and subtraction operationspremium-misra-c-2012-10.2
10.3The value of an expression shall not be assigned to an object with a narrower essential type or of a different essential type categorypremium-misra-c-2012-10.3
10.4Both operands of an operator in which the usual arithmetic conversions are performed shall have the same essential type categorypremium-misra-c-2012-10.4
10.5The value of an expression should not be cast to an inappropriate essential typepremium-misra-c-2012-10.5
10.6The value of a composite expression shall not be assigned to an object with wider essential typepremium-misra-c-2012-10.6
10.7If a composite expression is used as one operand of an operator in which the usual arithmetic conversions are performed then the other operand shall not have wider essential typepremium-misra-c-2012-10.7
10.8The value of a composite expression shall not be cast to a different essential type category or a wider essential typepremium-misra-c-2012-10.8
11.1Conversions shall not be performed between a pointer to a function and any other typepremium-misra-c-2012-11.1
11.2Conversions shall not be performed between a pointer to an incomplete type and any other typepremium-misra-c-2012-11.2
11.3A conversion shall not be performed between a pointer to object type and a pointer to a different object typepremium-misra-c-2012-11.3
11.4A conversion should not be performed between a pointer to object and an integer typepremium-misra-c-2012-11.4
11.5A conversion should not be performed from pointer to void into pointer to objectpremium-misra-c-2012-11.5
11.6A cast shall not be performed between pointer to void and an arithmetic typepremium-misra-c-2012-11.6
11.7A cast shall not be performed between pointer to object and a non-integer arithmetic typepremium-misra-c-2012-11.7
11.8A conversion shall not remove any const, volatile or _Atomic qualification from the type pointed to by a pointerpremium-misra-c-2012-11.8
11.9The macro NULL shall be the only permitted form of integer null pointer constantpremium-misra-c-2012-11.9
11.10The _Atomic qualifier shall not be applied to the incomplete type voidpremium-misra-c-2012-11.10
12.1The precedence of operators within expressions should be made explicitpremium-misra-c-2012-12.1
12.2The right hand operand of a shift operator shall lie in the range zero to one less than the width in bits of the essential type of the left hand operandpremium-misra-c-2012-12.2
12.3The comma operator should not be usedpremium-misra-c-2012-12.3
12.4Evaluation of constant expressions should not lead to unsigned integer wrap-aroundpremium-misra-c-2012-12.4
12.5The sizeof operator shall not have an operand which is a function parameter declared as "array of type"sizeofwithsilentarraypointer
12.6Structure and union members of atomic objects shall not be directly accessedpremium-misra-c-2012-12.6
13.1Initializer lists shall not contain persistent side effectspremium-misra-c-2012-13.1
13.2The value of an expression and its persistent side effects shall be the same under all permitted evaluation orders and shall be independent from thread interleavingunknownEvaluationOrder
premium-misra-c-2012-13.2
13.3A full expression containing an increment (++) or decrement (--) operator should have no other potential side effects other than that caused by the increment or decrement operatorpremium-misra-c-2012-13.3
13.4The result of an assignment operator should not be usedpremium-misra-c-2012-13.4
13.5The right hand operand of a logical && or || operator shall not contain persistent side effectspremium-misra-c-2012-13.5
13.6The operand of the sizeof operator shall not contain any expression which has potential side effectssizeofCalculation
premium-misra-c-2012-13.6
14.1A loop counter shall not have essentially floating typepremium-misra-c-2012-14.1
14.2A for loop shall be well-formedpremium-misra-c-2012-14.2
14.3Controlling expressions shall not be invariantcompareValueOutOfTypeRangeError
knownConditionTrueFalse
14.4The controlling expression of an if statement and the controlling expression of an iteration-statement shall have essentially Boolean typepremium-misra-c-2012-14.4
15.1The goto statement should not be usedpremium-misra-c-2012-15.1
15.2The goto statement shall jump to a label declared later in the same functionpremium-misra-c-2012-15.2
15.3Any label referenced by a goto statement shall be declared in the same block, or in any block enclosing the goto statementpremium-misra-c-2012-15.3
15.4There should be no more than one break or goto statement used to terminate any iteration statementpremium-misra-c-2012-15.4
15.5A function should have a single point of exit at the endpremium-misra-c-2012-15.5
15.6The body of an iteration-statement or a selection-statement shall be a compound-statementpremium-misra-c-2012-15.6
15.7All if … else if constructs shall be terminated with an else statementpremium-misra-c-2012-15.7
16.1All switch statements shall be well-formedpremium-misra-c-2012-16.1
16.2A switch label shall only be used when the most closely-enclosing compound statement is the body of a switch statementpremium-misra-c-2012-16.2
16.3An unconditional break statement shall terminate every switch-clausepremium-misra-c-2012-16.3
16.4Every switch statement shall have a default labelpremium-misra-c-2012-16.4
16.5A default label shall appear as either the first or the last switch label of a switch statementpremium-misra-c-2012-16.5
16.6Every switch statement shall have at least two switch-clausespremium-misra-c-2012-16.6
16.7A switch-expression shall not have essentially Boolean typepremium-misra-c-2012-16.7
17.1The features of <stdarg.h> shall not be usedpremium-misra-c-2012-17.1
17.2Functions shall not call themselves, either directly or indirectlypremium-misra-c-2012-17.2
17.3A function shall not be declared implicitlypremium-misra-c-2012-17.3
17.4All exit paths from a function with non-void return type shall have an explicit return statement with an expressionmissingReturn
premium-misra-c-2012-17.4
17.5The function argument corresponding to a parameter declared to have an array type shall have an appropriate number of elementsargumentSize
17.6The declaration of an array parameter shall not contain the static keyword between the [ ]premium-misra-c-2012-17.6
17.7The value returned by a function having non-void return type shall be usedpremium-misra-c-2012-17.7
17.8A function parameter should not be modifiedpremium-misra-c-2012-17.8
17.9A function declared with a _Noreturn function specifier shall not return to its callerpremium-misra-c-2012-17.9
17.10A function declared with a _Noreturn function specifier shall have void return typepremium-misra-c-2012-17.10
17.11A function that never returns should be declared with a _Noreturn function specifierpremium-misra-c-2012-17.11
17.12A function identifier should only be used with either a preceding &, or with a parenthesized parameter listpremium-misra-c-2012-17.12
17.13A function type shall not be type qualifiedpremium-misra-c-2012-17.13
18.1A pointer resulting from arithmetic on a pointer operand shall address an element of the same array as that pointer operandpointerOutOfBounds
18.2Subtraction between pointers shall only be applied to pointers that address elements of the same arraycomparePointers
18.3The relational operators >, >=, < and <= shall not be applied to expressions of pointer type except where they point into the same objectcomparePointers
18.4The +, -, += and -= operators should not be applied to an expression of pointer typepremium-misra-c-2012-18.4
18.5Declarations should contain no more than two levels of pointer nestingpremium-misra-c-2012-18.5
18.6The address of an object with automatic or thread-local storage shall not be copied to another object that persists after the first object has ceased to exist.danglingLifetime
danglingTemporaryLifetime
returnDanglingLifetime
18.7Flexible array members shall not be declaredpremium-misra-c-2012-18.7
18.8Variable-length arrays shall not be usedpremium-misra-c-2012-18.8
18.9An object with temporary lifetime shall not undergo array-to-pointer conversionpremium-misra-c-2012-18.9
18.10Pointers to variably-modified array types shall not be usedpremium-misra-c-2012-18.10
19.1An object shall not be assigned or copied to an overlapping objectoverlappingWriteUnion
overlappingWriteFunction
19.2The union keyword should not be usedpremium-misra-c-2012-19.2
20.1#include directives should only be preceded by preprocessor directives or commentspremium-misra-c-2012-20.1
20.2The ', " or \ characters and the /* or // character sequences shall not occur in a header file namepremium-misra-c-2012-20.2
20.3The #include directive shall be followed by either a <filename> or "filename" sequencepremium-misra-c-2012-20.3
20.4A macro shall not be defined with the same name as a keywordpremium-misra-c-2012-20.4
20.5#undef should not be usedpremium-misra-c-2012-20.5
20.6Tokens that look like a preprocessing directive shall not occur within a macro argumentpreprocessorErrorDirective
20.7Expressions resulting from the expansion of macro parameters shall be enclosed in parenthesespremium-misra-c-2012-20.7
20.8The controlling expression of a #if or #elif preprocessing directive shall evaluate to 0 or 1premium-misra-c-2012-20.8
20.9All identifiers used in the controlling expression of #if or #elif preprocessing directives shall be #define'd before evaluationpremium-misra-c-2012-20.9
20.10The # and ## preprocessor operators should not be usedpremium-misra-c-2012-20.10
20.11A macro parameter immediately following a # operator shall not immediately be followed by a ## operatorpremium-misra-c-2012-20.11
20.12A macro parameter used as an operand to the # or ## operators, which is itself subject to further macro replacement, shall only be used as an operand to these operatorspremium-misra-c-2012-20.12
20.13A line whose first token is # shall be a valid preprocessing directivepremium-misra-c-2012-20.13
20.14All #else, #elif and #endif preprocessor directives shall reside in the same file as the #if, #ifdef or #ifndef directive to which they are relatedpremium-misra-c-2012-20.14
21.1#define and #undef shall not be used on a reserved identifier or reserved macro namepremium-misra-c-2012-21.1
21.2A reserved identifier or reserved macro name shall not be declaredpremium-misra-c-2012-21.2
21.3The memory allocation and deallocation functions of <stdlib.h> shall not be usedpremium-misra-c-2012-21.3
21.4The standard header file <setjmp.h> shall not be usedpremium-misra-c-2012-21.4
21.5The standard header file <signal.h> shall not be usedpremium-misra-c-2012-21.5
21.6The Standard Library input/output functions shall not be usedpremium-misra-c-2012-21.6
21.7The Standard Library functions atof, atoi, atol and atoll of <stdlib.h> shall not be usedpremium-misra-c-2012-21.7
21.8The Standard Library termination functions of <stdlib.h> shall not be usedpremium-misra-c-2012-21.8
21.9The Standard Library functions bsearch and qsort of <stdlib.h> shall not be usedpremium-misra-c-2012-21.9
21.10The Standard Library time and date functions shall not be usedpremium-misra-c-2012-21.10
21.11The standard header file <tgmath.h> should not be usedpremium-misra-c-2012-21.11
21.12The standard header file <fenv.h> shall not be used.premium-misra-c-2012-21.12
21.13Any value passed to a function in <ctype.h> shall be representable as an unsigned char or be the value EOFinvalidFunctionArg
21.14The Standard Library function memcmp shall not be used to compare null terminated stringspremium-misra-c-2012-21.14
21.15The pointer arguments to the Standard Library functions memcpy, memmove and memcmp shall be pointers to qualified or unqualified versions of compatible typespremium-misra-c-2012-21.15
21.16The pointer arguments to the Standard Library function memcmp shall point to either a pointer type, an essentially signed type, an essentially unsigned type, an essentially Boolean type or an essentially enum typepremium-misra-c-2012-21.16
21.17Use of the string handling functions from <string.h> shall not result in accesses beyond the bounds of the objects referenced by their pointer parametersbufferAccessOutOfBounds
21.18The size_t argument passed to any function in <string.h> shall have an appropriate valuebufferAccessOutOfBounds
21.19The pointers returned by the Standard Library functions localeconv, getenv, setlocale or, strerror shall only be used as if they have pointer to const-qualified typepremium-misra-c-2012-21.19
21.20The pointer returned by the Standard Library functions asctime, ctime, gmtime, localtime, localeconv, getenv, setlocale or strerror shall not be used following a subsequent call to the same functionpremium-misra-c-2012-21.20
21.21The Standard Library function system of <stdlib.h> shall not be usedpremium-misra-c-2012-21.21
21.22All operand arguments to any type-generic macros declared in <tgmath.h> shall have an appropriate essential typepremium-misra-c-2012-21.22
21.23All operand arguments to any multi-argument type-generic macros declared in <tgmath.h> shall have the same standard typepremium-misra-c-2012-21.23
21.24The random number generator functions of <stdlib.h> shall not be usedpremium-misra-c-2012-21.24
21.25All memory synchronization operations shall be executed in sequentially consistent orderpremium-misra-c-2012-21.25
21.26The Standard Library function mtx_timedlock() shall only be invoked on mutex objects of appropriate mutex typepremium-misra-c-2012-21.26
22.1All resources obtained dynamically by means of Standard Library functions shall be explicitly releasedmemleak
resourceLeak
memleakOnRealloc
leakReturnValNotUsed
leakNoVarFunctionCall
22.2A block of memory shall only be freed if it was allocated by means of a Standard Library functionautovarInvalidDeallocation
22.3The same file shall not be open for read and write access at the same time on different streamsincompatibleFileOpen
22.4There shall be no attempt to write to a stream which has been opened as read-onlywriteReadOnlyFile
22.5A pointer to a FILE object shall not be dereferencedpremium-misra-c-2012-22.5
22.6The value of a pointer to a FILE shall not be used after the associated stream has been closeduseClosedFile
22.7The macro EOF shall only be compared with the unmodified return value from any Standard Library function capable of returning EOFpremium-misra-c-2012-22.7
22.8The value of errno shall be set to zero prior to a call to an errno-setting-functionpremium-misra-c-2012-22.8
22.9The value of errno shall be tested against zero after calling an errno-setting-functionpremium-misra-c-2012-22.9
22.10The value of errno shall only be tested when the last function to be called was an errno-setting-functionpremium-misra-c-2012-22.10
22.11A thread that was previously either joined or detached shall not be subsequently joined nor detachedpremium-misra-c-2012-22.11
22.12Thread objects, thread synchronization objects, and thread-specific storage pointers shall only be accessed by the appropriate Standard Library functionspremium-misra-c-2012-22.12
22.13Thread objects, thread synchronization objects and thread-specific storage pointers shall have appropriate storage durationpremium-misra-c-2012-22.13
22.14Thread synchronization objects shall be initialized before being accessedpremium-misra-c-2012-22.14
22.15Thread synchronization objects and thread-specific storage pointers shall not be destroyed until after all threads accessing them have terminatedpremium-misra-c-2012-22.15
22.16All mutex objects locked by a thread shall be explicitly unlocked by the same threadpremium-misra-c-2012-22.16
22.17No thread shall unlock a mutex or call cnd_wait() or cnd_timedwait() for a mutex it has not locked beforepremium-misra-c-2012-22.17
22.18Non-recursive mutexes shall not be recursively lockedpremium-misra-c-2012-22.18
22.19A condition variable shall be associated with at most one mutex objectpremium-misra-c-2012-22.19
22.20Thread-specific storage pointers shall be created before being accessedpremium-misra-c-2012-22.20
23.1A generic selection should only be expanded from a macropremium-misra-c-2012-23.1
23.2A generic selection that is not expanded from a macro shall not contain potential side effects in the controlling expressionpremium-misra-c-2012-23.2
23.3A generic selection should contain at least one non-default associationpremium-misra-c-2012-23.3
23.4A generic association shall list an appropriate typepremium-misra-c-2012-23.4
23.5A generic selection should not depend on implicit pointer type conversionpremium-misra-c-2012-23.5
23.6The controlling expression of a generic selection shall have an essential type that matches its standard typepremium-misra-c-2012-23.6
23.7A generic selection that is expanded from a macro should evaluate its argument only oncepremium-misra-c-2012-23.7
23.8A default association shall appear as either the first or the last association of a generic selectionpremium-misra-c-2012-23.8