aboutgitcodebugslistschat
path: root/seccomp.sh
diff options
context:
space:
mode:
authorDavid Gibson <david@gibson.dropbear.id.au>2024-03-21 15:57:38 +1100
committerStefano Brivio <sbrivio@redhat.com>2024-04-05 16:59:11 +0200
commitef2cb13b499a41b6da215822772bf2a05aa69f9e (patch)
treea69d1935238765f274b8bfa37716bc6ccb291698 /seccomp.sh
parent97e8b33f8708dea4d5666e4612c0377eb158b470 (diff)
downloadpasst-ef2cb13b499a41b6da215822772bf2a05aa69f9e.tar
passt-ef2cb13b499a41b6da215822772bf2a05aa69f9e.tar.gz
passt-ef2cb13b499a41b6da215822772bf2a05aa69f9e.tar.bz2
passt-ef2cb13b499a41b6da215822772bf2a05aa69f9e.tar.lz
passt-ef2cb13b499a41b6da215822772bf2a05aa69f9e.tar.xz
passt-ef2cb13b499a41b6da215822772bf2a05aa69f9e.tar.zst
passt-ef2cb13b499a41b6da215822772bf2a05aa69f9e.zip
cppcheck: Explicitly give files to check
Currently "make cppcheck" invokes cppcheck on ".", so it will check all the .c and .h files it can find in the source tree. This isn't ideal, because it can find files that aren't actually part of the real build, or even stale files which aren't in git. More practically, some upcoming changes are looking at downloading other source trees for some tests. Static errors in there is Not Our Problem, so checking them is both slow and pointless. So, change the Makefile to invoke cppcheck only on the specific source files that are part of the build. For some reason in this format the badBitmaskCheck warnings in seccomp.h which were suppressed by 5beb3472e ("cppcheck: Avoid errors due to zeroes in bitwise ORs") no longer trigger. That means we get unmatchedSuppression warnings instead. We add an unmatchedSuppression suppression instead of simply removing the original suppressions, just in case this odd behaviour isn't the same for all cppcheck versions. Signed-off-by: David Gibson <david@gibson.dropbear.id.au> Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
Diffstat (limited to 'seccomp.sh')
-rwxr-xr-xseccomp.sh4
1 files changed, 2 insertions, 2 deletions
diff --git a/seccomp.sh b/seccomp.sh
index e1224e0..052e1c8 100755
--- a/seccomp.sh
+++ b/seccomp.sh
@@ -29,11 +29,11 @@ HEADER="/* This file was automatically generated by $(basename ${0}) */
# Prefix for each profile: check that 'arch' in seccomp_data is matching
PRE='
struct sock_filter filter_@PROFILE@[] = {
- /* cppcheck-suppress badBitmaskCheck */
+ /* cppcheck-suppress [badBitmaskCheck, unmatchedSuppression] */
BPF_STMT(BPF_LD | BPF_W | BPF_ABS,
(offsetof(struct seccomp_data, arch))),
BPF_JUMP(BPF_JMP | BPF_JEQ | BPF_K, PASST_AUDIT_ARCH, 0, @KILL@),
- /* cppcheck-suppress badBitmaskCheck */
+ /* cppcheck-suppress [badBitmaskCheck, unmatchedSuppression] */
BPF_STMT(BPF_LD | BPF_W | BPF_ABS,
(offsetof(struct seccomp_data, nr))),