I've got a .h file that is included by both C and C++ source files. Its contents is wrapped in #ifdef __cplusplus extern "C" { #endif ... #ifdef __cplusplus } #endif Yet, when I includ...

I m in process of understanding and building a static code analysis tool for a proprietary language from a big company. Reason for doing this , I have to review a rather large code base , and a sta...

I'm writing the startup code for an embedded system -- the code that loads the initial stack pointer before jumping to the main() function -- and I need to tell it how many bytes of stack my applic...

Problem: I am setting up jenkins + sonar + github integration for automatic pullrequest static code check through sonar. My Configuration: Installed Sonar with github Installed jenkins In jenkin...

I'm using a closed-source application that loads Lua scripts and allows some customization through modifying these scripts. Unfortunately that application is not very good at generating useful log ...

Is it possible to determine whether or not a javascript function is "pure", using javascript? A function is said to be pure when it behaves in a predictable way, in the sense that for each x, th...

Is there any static code analysis tool for terraform? I tried tflint. But it doesn't support output of module or attributes of resources. any other suggestion please

When developing C++ code, I often find myself trying to do something for all the data members belonging to a class. Classic examples are in the copy constructor and assignment operator. Another pla...

I have a simple home made linter that I use for work, it's invoked like this: python3 scripts/lint.py FILENAME The output is completely standard linter-style output, like: path/to/file.yang:5:19: ...

I have a private methods in some low level classes that are not currently in use, but I don't want the "Method x is never used" warning potentially obscuring other more important warnings...

I would like to express, with Frama-c and the WP plug-in, that the stringCompare function written below acts as "it is supposed to" - namely: That given identical input strings, the funct...

One of the things I like about Typescript in VS Code is the ability to find all references to a function with Shift+F12 (or right-click). Is it possible to get to this mapping programatically, or t...

I am trying to perform WCET analysis using OTAWA on tasking-Framework. However , the tool is unable to resolve indirect jump instructions. I investigated the source of these indirect jumps and I fo...

Does anyone know if there's a good tool for analyzing JavaScript code and detecting type errors? I know that JavaScript itself is weakly and dynamically typed, but it would be really nice if I coul...

I have a dependency as source in my project that I have no control over. I'm using cmake's clang-tidy integration to analyze my code, and this dependency is firing A LOT of warnings. Is there a way...

I'm looking for a code duplication tool that is language agnostic. It's easy to find language specific code duplication tools (for Java, C, PHP, ...), but I'd like to run some code duplicatio...

Is there a linter that detects usages of functions that are marked as deprecated with the @deprecated decorator from the deprecated package? e.g. in from deprecated import deprecated def realfun()...

This is my pom.xml: <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.o...

To implement checks for some magic _get() functions, I'm trying to implement a "class reflection extension". The manual mentions how to write the extension files themselves, and to instal...

I have following code. I am getting "Avoid using Literals in Conditional Statements." warning in PMD on line number 5. List<Object> listObj = getData(); if (listObj.isEmpty()) { throw new ...

I'm trying to make a PHP regex to extract functions from php source code. Until now i used a recursive regex to extract everything between {} but then it also matches stuff like if statements. When...

I ran into a method today that is .. not used anywhere .. but is tested. Since it is used by a test, IntelliJ did not flag the method as 'unused'. Does IntelliJ allow for the following search cond...

While reviewing a codebase, I came upon a particular piece of code that triggered a warning regarding an "out of bounds access". After looking at the code, I could not see a way for the r...

Has anyone come across a tool to report on commented-out code in a .NET app? I'm talking about patterns like: //var foo = "This is dead"; And /* var foo = "This is dead"; */ This won't be fou...

When I start to use an existing app/codebase, I'm often confounded by which environment variables it's wired to use. People make bad docs, and I hate hunting and being disoriented by this part of a...