openvpn/dev-tools/openvpn-cppcheck-library.cfg
Frank Lichtenheld a71e8508f9 dev-tools: Fix run-cppcheck to cover more code
Massively improve how we call cppcheck to cover
more code and identify more issues.

When specifying any -D argument all other defines
are ignored unless --force or --max-configs is
specified as well. I mistakenly assumed that this
was covered by --check-level=exhaustive. We need
to try finding a value for --max-configs so that
cppcheck doesn't spend hours scanning options.c

Add a library cfg for our code which for now
- identifies some printf-style functions
- adds some common macro defines

Use existing libraries.

Add a second call to cppcheck to separate the
Windows and Unixy code scans. This avoids some
very non-sensical define combinations.

Change-Id: I05720ccc3bcf706bbe62254afb74562580f5de56
Signed-off-by: Frank Lichtenheld <frank@lichtenheld.com>
Acked-by: Gert Doering <gert@greenie.muc.de>
Gerrit URL: https://gerrit.openvpn.net/c/openvpn/+/1665
Message-Id: <20260607170713.4980-1-gert@greenie.muc.de>
URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg37078.html
Signed-off-by: Gert Doering <gert@greenie.muc.de>
2026-06-09 09:09:04 +02:00

29 lines
740 B
INI

<?xml version ="1.0"?>
<def>
<function name="x_msg">
<formatstr type="printf"/>
<arg nr="2">
<formatstr />
</arg>
</function>
<function name="buf_printf">
<formatstr type="printf"/>
<arg nr="2">
<formatstr />
</arg>
</function>
<function name="checked_snprintf">
<formatstr type="printf"/>
<arg nr="3">
<formatstr />
</arg>
</function>
<function name="check_malloc_return">
<noreturn>true</noreturn>
</function>
<define name="HAVE_CONFIG_H" value="1" />
<define name="CONFIGURE_SPECIAL_BUILD" value="foo" />
<!-- work around macro confusion -->
<define name="CMSG_FIRSTHDR" value="cmsg_firsthdr" />
<define name="CMSG_NXTHDR" value="cmsg_nxthdr" />
</def>