Hands-On: First Static Analysis Run

#!/bin/bash
# First static analysis run: MISRA C:2012 with cppcheck

# Install cppcheck (Ubuntu/Debian)
# sudo apt-get install cppcheck

SOURCE_DIR="src/"
REPORT_XML="reports/misra_report.xml"
SUPPRESSIONS="config/misra_suppressions.txt"

mkdir -p reports

cppcheck \
    --addon=misra \
    --enable=all \
    --suppress=missingIncludeSystem \
    --suppressions-list=${SUPPRESSIONS} \
    --xml \
    --output-file=${REPORT_XML} \
    -I include/ \
    ${SOURCE_DIR}

echo "Analysis complete. Violations in: ${REPORT_XML}"
echo "Summary:"
python3 parse_cppcheck.py ${REPORT_XML}

"""Parse cppcheck XML output; summarise MISRA violations."""
import sys
import xml.etree.ElementTree as ET
from collections import defaultdict

def parse_cppcheck_xml(xml_file: str) -> list:
    tree = ET.parse(xml_file)
    root = tree.getroot()
    violations = []
    for error in root.iter("error"):
        rule_id = error.get("id", "")
        msg     = error.get("msg", "")
        sev     = error.get("severity", "")
        for loc in error.iter("location"):
            violations.append({
                "rule":   rule_id,
                "file":   loc.get("file", ""),
                "line":   int(loc.get("line", 0)),
                "msg":    msg,
                "sev":    sev
            })
    return violations

violations = parse_cppcheck_xml(sys.argv[1])
by_rule = defaultdict(list)
for v in violations:
    by_rule[v["rule"]].append(v)

print(f"Total violations: {len(violations)}")
print("\nTop violations by rule:")
for rule, vs in sorted(by_rule.items(), key=lambda x: -len(x[1]))[:10]:
    print(f"  {rule:30s}: {len(vs):4d} occurrences")
    if vs:
        print(f"    Example: {vs[0]['file']}:{vs[0]['line']} -- {vs[0]['msg'][:60]}")