Hello @Wes ,
Thanks for reporting these false positives.
I don’t succeed in reproducing the issues on my side so do you think you could create a small reproducer for each of those two false positives?
To generate a reproducer file:
- Add the reproducer option to the scanner configuration:
sonar.cfamily.reproducer= "Full path to the .cpp file that has or include the file that has the false-positive" - Re-running the scanner should generate a file named
sonar-cfamily.reproducerin the project folder. - Please share this file (I can send you a PM if you want to share it privately)
Thank you