From 117a5d39f548b27e62a5b41d626ee107fcc71e92 Mon Sep 17 00:00:00 2001
From: Elena Zhelezina <elena.zhelezina@arm.com>
Date: Tue, 6 Dec 2022 13:29:19 +0000
Subject: Added cppcheck config to avoid usage of security sensitive functions.

Change-Id: I4247c5e937e33904b1db5de6c07b50bec2559b03
---
 cppcheck.cfg | 39 +++++++++++++++++++++++++++++++++++++++
 1 file changed, 39 insertions(+)
 create mode 100644 cppcheck.cfg

(limited to 'cppcheck.cfg')

diff --git a/cppcheck.cfg b/cppcheck.cfg
new file mode 100644
index 0000000..f8e2620
--- /dev/null
+++ b/cppcheck.cfg
@@ -0,0 +1,39 @@
+<?xml version="1.0"?>
+<!-- Based on https://confluence.arm.com/display/ARMSW/Security+Sensitive+APIs Exclude errors if you still need this function. -->
+<def format="2">
+<function name="strlen">
+  <warn severity="error">This function is considered security sensitive. Please make sure of its proper use by following https://confluence.arm.com/display/ARMSW/Security+Sensitive+APIs
+    </warn>
+  <arg nr="1"/>
+</function>
+<function name="strcpy">
+  <warn severity="error">This function is considered security sensitive. Please make sure of its proper use by following https://confluence.arm.com/display/ARMSW/Security+Sensitive+APIs
+    </warn>
+  <arg nr="1"/>
+</function>
+<function name="strncpy">
+  <warn severity="error">This function is considered security sensitive. Please make sure of its proper use by following https://confluence.arm.com/display/ARMSW/Security+Sensitive+APIs
+    </warn>
+  <arg nr="1"/>
+</function>
+<function name="snprintf">
+  <warn severity="error">This function is considered security sensitive. Please make sure of its proper use by following https://confluence.arm.com/display/ARMSW/Security+Sensitive+APIs
+    </warn>
+  <arg nr="1"/>
+</function>
+<function name="strncat">
+  <warn severity="error">This function is considered security sensitive. Please make sure of its proper use by following https://confluence.arm.com/display/ARMSW/Security+Sensitive+APIs
+    </warn>
+  <arg nr="1"/>
+</function>
+<function name="strtok">
+  <warn severity="error">This function is considered security sensitive. Please make sure of its proper use by following https://confluence.arm.com/display/ARMSW/Security+Sensitive+APIs
+    </warn>
+  <arg nr="1"/>
+</function>
+<function name="scanfk">
+  <warn severity="error">This function is considered security sensitive. Please make sure of its proper use by following https://confluence.arm.com/display/ARMSW/Security+Sensitive+APIs
+    </warn>
+  <arg nr="1"/>
+</function>
+</def>
\ No newline at end of file
-- 
cgit v1.2.1