1
2

root@vm:~# cat llvm.sh  | grep -n 64
142:    REPO_NAME="deb [arch=amd64] ${BASE_URL}/${CODENAME}/  llvm-toolchain${LINKNAME}${LLVM_VERSION_STRING} main"

1

export PATH="$PATH:/usr/lib/llvm-18/bin"

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24

root@vm:~/cppaudit/testcode# scan-build clang -c dvcp.c 
scan-build: Using '/usr/lib/llvm-18/bin/clang' for static analysis
dvcp.c:62:5: warning: Attempt to free released memory [unix.Malloc]
   62 |                                 free(buff1);
      |                                 ^~~~~~~~~~~
dvcp.c:67:14: warning: Use of memory after it is freed [unix.Malloc]
   67 |                                         buff1[0]='a';
      |                                         ~~~~~~~~^
dvcp.c:90:9: warning: Value stored to 'OOBR' during its initialization is never read [deadcode.DeadStores]
   90 |                         char OOBR = buff3[size3];
      |                              ^~~~   ~~~~~~~~~~~~
dvcp.c:91:9: warning: Value stored to 'OOBR_heap' during its initialization is never read [deadcode.DeadStores]
   91 |                         char OOBR_heap = buff4[size3];
      |                              ^~~~~~~~~   ~~~~~~~~~~~~
dvcp.c:104:16: warning: Potential leak of memory pointed to by 'buff4' [unix.Malloc]
  104 |                         int size4 = img.width * img.height;
      |                                     ^~~
dvcp.c:114:12: warning: Potential leak of memory pointed to by 'buff5' [unix.Malloc]
  114 |                                 }while(buff5);
      |                                        ^~~~~
6 warnings generated.
scan-build: Analysis run complete.
scan-build: 6 bugs found.
scan-build: Run 'scan-view /tmp/scan-build-2024-09-22-025530-11924-1' to examine bug reports.

1
2
3
4

常用选项
-o <directory>：指定输出报告的目录。如果不指定，报告将默认保存在 /tmp 下的一个目录中。
-v：增加输出的详细程度。
-V：在构建完成后自动在浏览器中打开分析结果。

1

scan-build make -j4

1
2

scan-build cmake -DCMAKE_C_COMPILER=clang -DCMAKE_CXX_COMPILER=clang++ ..
scan-build make

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29

sudo apt-get install cppcheck g++ build-essential curl gcc-multilib git python3-dev python3-venv python3-setuptools

# Install nodejs dependency for web. In case of Debian/Ubuntu you can use the
# following commands. For more information see the official docs:
# https://nodejs.org/en/download/package-manager/
curl -sL https://deb.nodesource.com/setup_16.x | sudo -E bash -
sudo apt-get install -y nodejs

# Check out CodeChecker source code.
git clone https://github.com/Ericsson/CodeChecker.git --depth 1 ~/codechecker
cd ~/codechecker

# Create a Python virtualenv and set it as your environment.
# NOTE: if you want to develop CodeChecker, use the `venv_dev` target instead
# of `venv`.
make venv
source $PWD/venv/bin/activate

# [Optional] If you want to use external authentication methods (LDAP / PAM)
# follow the instructions in
# docs/web/authentication.md#external-authentication-methods

# Build and install a CodeChecker package.
make package

# For ease of access, add the build directory to PATH.
export PATH="$PWD/build/CodeChecker/bin:$PATH"

cd ..