From 117a5d39f548b27e62a5b41d626ee107fcc71e92 Mon Sep 17 00:00:00 2001
From: Elena Zhelezina <elena.zhelezina@arm.com>
Date: Tue, 6 Dec 2022 13:29:19 +0000
Subject: Added cppcheck config to avoid usage of security sensitive functions.

Change-Id: I4247c5e937e33904b1db5de6c07b50bec2559b03
---
 cppcheck.cfg         | 39 +++++++++++++++++++++++++++++++++++++++
 docker/CI.Dockerfile |  2 +-
 2 files changed, 40 insertions(+), 1 deletion(-)
 create mode 100644 cppcheck.cfg

diff --git a/cppcheck.cfg b/cppcheck.cfg
new file mode 100644
index 0000000..f8e2620
--- /dev/null
+++ b/cppcheck.cfg
@@ -0,0 +1,39 @@
+<?xml version="1.0"?>
+<!-- Based on https://confluence.arm.com/display/ARMSW/Security+Sensitive+APIs Exclude errors if you still need this function. -->
+<def format="2">
+<function name="strlen">
+  <warn severity="error">This function is considered security sensitive. Please make sure of its proper use by following https://confluence.arm.com/display/ARMSW/Security+Sensitive+APIs
+    </warn>
+  <arg nr="1"/>
+</function>
+<function name="strcpy">
+  <warn severity="error">This function is considered security sensitive. Please make sure of its proper use by following https://confluence.arm.com/display/ARMSW/Security+Sensitive+APIs
+    </warn>
+  <arg nr="1"/>
+</function>
+<function name="strncpy">
+  <warn severity="error">This function is considered security sensitive. Please make sure of its proper use by following https://confluence.arm.com/display/ARMSW/Security+Sensitive+APIs
+    </warn>
+  <arg nr="1"/>
+</function>
+<function name="snprintf">
+  <warn severity="error">This function is considered security sensitive. Please make sure of its proper use by following https://confluence.arm.com/display/ARMSW/Security+Sensitive+APIs
+    </warn>
+  <arg nr="1"/>
+</function>
+<function name="strncat">
+  <warn severity="error">This function is considered security sensitive. Please make sure of its proper use by following https://confluence.arm.com/display/ARMSW/Security+Sensitive+APIs
+    </warn>
+  <arg nr="1"/>
+</function>
+<function name="strtok">
+  <warn severity="error">This function is considered security sensitive. Please make sure of its proper use by following https://confluence.arm.com/display/ARMSW/Security+Sensitive+APIs
+    </warn>
+  <arg nr="1"/>
+</function>
+<function name="scanfk">
+  <warn severity="error">This function is considered security sensitive. Please make sure of its proper use by following https://confluence.arm.com/display/ARMSW/Security+Sensitive+APIs
+    </warn>
+  <arg nr="1"/>
+</function>
+</def>
\ No newline at end of file
diff --git a/docker/CI.Dockerfile b/docker/CI.Dockerfile
index 7994cb8..66c78bf 100644
--- a/docker/CI.Dockerfile
+++ b/docker/CI.Dockerfile
@@ -7,7 +7,7 @@ ARG BAZEL_VERSION=5.3.0
 ARG TENSORFLOW_VERSION=2.13.0
 
 RUN apt-get update
-RUN apt-get install -y build-essential software-properties-common clang curl unzip git libc++-dev libc++abi-dev
+RUN apt-get install -y build-essential software-properties-common clang curl unzip git libc++-dev libc++abi-dev cppcheck
 
 RUN add-apt-repository -y ppa:deadsnakes/ppa
 RUN apt-get update
-- 
cgit v1.2.1