I use SonarQube:8.0, Scanner 4.2.0.1873 to analyze my C++ code, and in C++ rules I can see it has the rule " Dynamically allocated memory should be released" and " Local variables should be initialized immediately", but I input the code, just like this "int* a; a = new int; " there are no errors rep…

I just tried to analyze the code you provided and the rule was triggered. There must be something wrong in your configuration: Make sure that you are analyzing the file containing the code you mentioned. You can check the scanner log to see the analyzed files. Make sure you are using the latest ve…

Hi, I have active my C++ quality profile, and I suppose this rules are active by default, and I can not deactive them, am i right? I also test other cases, adding some code like this " char p[100]; char s[90]; memcpy(p,s,100);" I think it should report 3 issues, not initialized and should replace m…

Hello @judy , [image] judy: I suppose this rules are active by default, and I can not deactive them, am i right? No. To check the activated rule you can click 249 in the screenshot you shared. For example, you can see that the rule Local variables should be initialized immediately is not the…

thanks for your reply, I click the 249 in my screenshot, I found the rule related with variable initialize [image] , and it can not be deactivate

[image] judy: I found the rule related with variable initialize No you didn’t. please read the rule description carefully. "Local variables should be initialized immediately" is not the same as "Variables should be initialized before use". Please follow the steps that I provided to create …

yes, I follow your instruction to create my quality profile, and input the noncompliance example code in "Variables should be initialized before use" rules, such as bool function() {bool b; return b;} but there is no "Variables should be initialized before use" error.

Yes this file is analyzing, but there is no error related this rules, it reported another errors, and how to check whether I use the SonarCFamily 6.5? [image]

When you run the scanner in debug mode: sonar-scanner -X you should see the log that indicates the version of the plugin you are using. For me it is: SonarCFamily 6.5.0.12506. To update your plugin you should go to Administration -> Marketplace.

OK，thank you so much, I use the SonarCFamily 6.4.0.11646, I will update it. thank you so much. by the way, if I want to upgrade the rule, I must reinstall the latest SonarQub? or is there some extension to just update the newest rules? my work environment can not connect to internet, so I can not up…

No, you don’t have to reinstall SonarQube. You only have to replace the old plugin jar with the new one in sonarqube/extentions/plugins directory and relaunch SonarQube.

can you provide the plugin jar link?

C++ analysis rules

SonarQube Server / Community Build

Topic		Replies	Views
SonarQube does not catch issues in C++ code SonarQube Server / Community Build sonarqube , scanner , cfamily	1	1139	May 29, 2020
No C++ rules to select in a Quality Profile SonarQube Server / Community Build cpp , sonarqube , cfamily	8	2053	November 26, 2019
No C++ rules in quality profile SonarQube Server / Community Build sonarqube	2	621	May 31, 2021
FP in SonarQube Server but not SonarQube for IDE? Report False-positive / False-negative...	1	63	February 13, 2025
SonarQube does not highlight all c-code issues by rule "Variables should be initialized before use" Report False-positive / False-negative... cfamily	3	620	January 5, 2022

C++ analysis rules

Related topics