msi3 - Static Analysis [ 0 / 187 / 50 ]

User configuration: Recommended Rules with Security

2022-07-08T15:14:32+08:00

(push the "Import My Recommended Tasks" button to import the tasks into your workspace)

Tasks: 187 total, 0 suppressed

Goal: accomplish all tasks

[40] CERT-MSC41_C (RULE) Never hard code sensitive information (CERT_C-MSC41)

[40] Do not hard code string literals (CERT_C-MSC41-a-1)

[3] CERT-POS54_C (RULE) Detect and handle POSIX library errors (CERT_C-POS54)

[3] The value returned by a function having non-void return type shall be used (CERT_C-POS54-a-1)

[5] CERT-ERR33_C (RULE) Detect and handle standard library errors (CERT_C-ERR33)

[5] The value returned by a function having non-void return type shall be used (CERT_C-ERR33-a-1)

[1] CERT-ERR59_CPP (RULE) Do not throw an exception across execution boundaries (CERT_CPP-ERR59)

[1] Do not throw an exception across execution boundaries (CERT_CPP-ERR59-a-1)

[1] Coding Conventions for C++ (CODSTA-CPP)

[1] Constructors allowing for conversion should be made explicit (CODSTA-CPP-04-1)

msi3 Recommended Tasks to Accomplish Today : 50

/rmf_task_ros2_testing/src/rmf_task_ros2/Dispatcher.cpp
	67:	The string literal is embedded directly in the code: $id	CERT_C-MSC41-a-1
	136:	Unused function's "erase" return value	CERT_C-ERR33-a-1
	175:	The string literal is embedded directly in the code: patrol	CERT_C-MSC41-a-1
	176:	The string literal is embedded directly in the code: delivery	CERT_C-MSC41-a-1
	185:	Constructor 'Implementation' allowing conversion should be made explicit	CODSTA-CPP-04-1
	190:	The string literal is embedded directly in the code: bidding_time_window	CERT_C-MSC41-a-1
	197:	The string literal is embedded directly in the code: terminated_tasks_max_size	CERT_C-MSC41-a-1
	214:	The string literal is embedded directly in the code: task_api_requests	CERT_C-MSC41-a-1
	222:	The string literal is embedded directly in the code: task_api_responses	CERT_C-MSC41-a-1
	322:	The string literal is embedded directly in the code: patrol	CERT_C-MSC41-a-1
	337:	The string literal is embedded directly in the code: delivery	CERT_C-MSC41-a-1
	404:	The string literal is embedded directly in the code: type	CERT_C-MSC41-a-1
	420:	The string literal is embedded directly in the code: dispatch_task_request	CERT_C-MSC41-a-1
	430:	The error from the 'validate' library function should be indicated by a return value instead of an exception	CERT_CPP-ERR59-a-1
	430:	Unused function's "validate" return value	CERT_C-ERR33-a-1
	435:	The string literal is embedded directly in the code: code	CERT_C-MSC41-a-1
	437:	The string literal is embedded directly in the code: detail	CERT_C-MSC41-a-1
	440:	The string literal is embedded directly in the code: success	CERT_C-MSC41-a-1
	441:	The string literal is embedded directly in the code: errors	CERT_C-MSC41-a-1
	454:	The string literal is embedded directly in the code: request	CERT_C-MSC41-a-1
	456:	The string literal is embedded directly in the code: category	CERT_C-MSC41-a-1
	457:	The string literal is embedded directly in the code: .dispatch-	CERT_C-MSC41-a-1
	504:	The string literal is embedded directly in the code: .dispatch-	CERT_C-MSC41-a-1
	510:	The string literal is embedded directly in the code: unix_millis_earliest_start_time	CERT_C-MSC41-a-1
	515:	The string literal is embedded directly in the code: priority	CERT_C-MSC41-a-1
	516:	The string literal is embedded directly in the code: binary	CERT_C-MSC41-a-1
	516:	The string literal is embedded directly in the code: type	CERT_C-MSC41-a-1
	517:	The string literal is embedded directly in the code: value	CERT_C-MSC41-a-1
	519:	The string literal is embedded directly in the code: description	CERT_C-MSC41-a-1
	520:	The string literal is embedded directly in the code: labels	CERT_C-MSC41-a-1
	522:	Unused function's "push_bid_notice" return value	CERT_C-POS54-a-1
	534:	The string literal is embedded directly in the code: booking	CERT_C-MSC41-a-1
	535:	The string literal is embedded directly in the code: id	CERT_C-MSC41-a-1
	539:	The string literal is embedded directly in the code: unix_millis_earliest_start_time	CERT_C-MSC41-a-1
	551:	The string literal is embedded directly in the code: category	CERT_C-MSC41-a-1
	551:	The string literal is embedded directly in the code: category	CERT_C-MSC41-a-1
	552:	The string literal is embedded directly in the code: description	CERT_C-MSC41-a-1
	552:	The string literal is embedded directly in the code: detail	CERT_C-MSC41-a-1
	555:	The string literal is embedded directly in the code: status	CERT_C-MSC41-a-1
	704:	The string literal is embedded directly in the code: unknown	CERT_C-MSC41-a-1
	721:	The string literal is embedded directly in the code: code	CERT_C-MSC41-a-1
	722:	The string literal is embedded directly in the code: category	CERT_C-MSC41-a-1
	722:	The string literal is embedded directly in the code: rejection	CERT_C-MSC41-a-1
	723:	The string literal is embedded directly in the code: detail	CERT_C-MSC41-a-1
	724:	The string literal is embedded directly in the code: No fleet adapters offered a bid for task [	CERT_C-MSC41-a-1
	791:	Unused function's "erase" return value	CERT_C-ERR33-a-1
	865:	Unused function's "erase" return value	CERT_C-ERR33-a-1
	865:	Unused function's "erase" return value	CERT_C-POS54-a-1
	879:	Unused function's "erase" return value	CERT_C-ERR33-a-1
	879:	Unused function's "erase" return value	CERT_C-POS54-a-1

[2] CERT-INT02_C (REC) Understand integer conversion rules (CERT_C-INT02)

[2] Implicit conversions from wider to narrower integral type which may result in a loss of information shall not be used (CERT_C-INT02-a-2)

[4] CERT-MEM02_C (REC) Immediately cast the result of a memory allocation function call into a pointer to the allocated type (CERT_C-MEM02)

[2] Assignment operator should have operands of compatible types (CERT_C-MEM02-a-3)

[2] Do not assign function return value to a variable of incompatible type (CERT_C-MEM02-b-3)

[3] CERT-MSC01_C (REC) Strive for logical completeness (CERT_C-MSC01)

[3] All 'if...else-if' constructs shall be terminated with an 'else' clause (CERT_C-MSC01-a-2)

[1] CERT-MSC09_C (REC) Character encoding: Use subset of ASCII for safety (CERT_C-MSC09)

[1] Only use characters defined in ISO C standard (CERT_C-MSC09-a-3)

[4] CERT-FIO41_C (RULE) Do not call getc(), putc(), getwc(), or putwc() with a stream argument that has side effects (CERT_C-FIO41)

[4] A full expression containing an increment (++) or decrement (--) operator should have no other potential side effects (CERT_C-FIO41-e-3)

[57] CERT-MSC41_C (RULE) Never hard code sensitive information (CERT_C-MSC41)

[57] Do not hard code string literals (CERT_C-MSC41-a-1)

[41] CERT-API00_C (REC) Functions should validate their parameters (CERT_C-API00)

[41] The validity of parameters must be checked inside each function (CERT_C-API00-a-3)

[3] CERT-EXP00_C (REC) Use parentheses for precedence of operation (CERT_C-EXP00)

[3] Use parenthesis to clarify expression order if operators with precedence lower than arithmetic are used (CERT_C-EXP00-a-3)

[2] CERT-DCL19_C (REC) Minimize the scope of variables and functions (CERT_C-DCL19)

[2] Declare variables as locally as possible (CERT_C-DCL19-a-3)

[1] CERT-DCL15_C (REC) Declare file-scope objects or functions that do not need external linkage as static (CERT_C-DCL15)

[1] Objects or functions with external linkage shall be declared in a header file (CERT_C-DCL15-a-3)

[7] CERT-EXP12_C (REC) Do not ignore values returned by functions (CERT_C-EXP12)

[7] The value returned by a function having non-void return type shall be used (CERT_C-EXP12-a-3)

[3] CERT-EXP19_C (REC) Use braces for the body of an if, for, or while statement (CERT_C-EXP19)

[3] The statement forming the body of a 'switch', 'while', 'do...while' or 'for' statement shall be a compound statement (CERT_C-EXP19-a-2)

[7] CERT-POS54_C (RULE) Detect and handle POSIX library errors (CERT_C-POS54)

[7] The value returned by a function having non-void return type shall be used (CERT_C-POS54-a-1)

[7] CERT-ERR33_C (RULE) Detect and handle standard library errors (CERT_C-ERR33)

[7] The value returned by a function having non-void return type shall be used (CERT_C-ERR33-a-1)

[1] CERT-DCL01_C (REC) Do not reuse variable names in subscopes (CERT_C-DCL01)

[1] Identifiers declared in an inner local scope should not hide identifiers declared in an outer local scope (CERT_C-DCL01-b-3)

[7] CERT-DCL00_C (REC) Const-qualify immutable objects (CERT_C-DCL00)

[7] Declare parameters or local variable as const whenever possible (CERT_C-DCL00-a-3)

[1] CERT-ERR50_CPP (RULE) Do not abruptly terminate the program (CERT_CPP-ERR50)

[1] Exceptions shall be raised only after start-up and before termination of the program (CERT_CPP-ERR50-f-3)

[1] CERT-ERR59_CPP (RULE) Do not throw an exception across execution boundaries (CERT_CPP-ERR59)

[1] Do not throw an exception across execution boundaries (CERT_CPP-ERR59-a-1)

[1] CERT-ERR58_CPP (RULE) Handle all exceptions thrown before main() begins executing (CERT_CPP-ERR58)

[1] Exceptions shall be raised only after start-up and before termination of the program (CERT_CPP-ERR58-a-2)

[1] CERT-STR53_CPP (RULE) Range check element access (CERT_CPP-STR53)

[1] Guarantee that container indices are within the valid range (CERT_CPP-STR53-a-2)

[1] CERT-EXP60_CPP (RULE) Do not pass a nonstandard-layout type object across execution boundaries (CERT_CPP-EXP60)

[1] Do not pass a nonstandard-layout type object across execution boundaries (CERT_CPP-EXP60-a-1)

[1] CERT-EXP61_CPP (RULE) A lambda object must not outlive any of its reference captured objects (CERT_CPP-EXP61)

[1] Never capture local objects from an outer lambda by reference (CERT_CPP-EXP61-b-2)

[1] CERT-CTR50_CPP (RULE) Guarantee that container indices and iterators are within the valid range (CERT_CPP-CTR50)

[1] Guarantee that container indices are within the valid range (CERT_CPP-CTR50-a-2)

[1] Coding Conventions for C++ (CODSTA-CPP)

[1] Constructors allowing for conversion should be made explicit (CODSTA-CPP-04-1)

[15] Metric (METRIC)

[4] McCabe Cyclomatic Complexity (METRIC.CC-3)

[11] Nested Blocks Depth (METRIC.NBD-3)

[14] Optimization (OPT)

[14] Pass objects by reference instead of by value (OPT-14-3)

msi3 Total Tasks : 187

/rmf_task_ros2_testing/src/rmf_task_ros2/DispatchState.cpp

27:

The parameter 'task_id_' of function 'DispatchState' is passed by value

OPT-14-3

28:

The parameter 'submission_time_' of function 'DispatchState' is passed by value

OPT-14-3

54:

Function 'convert' has external linkage and is not declared in the header

CERT_C-DCL15-a-3

54:

Parameter 'values' is not validated before use

CERT_C-API00-a-3

58:

'for' statement in a function 'convert' should be followed by a block

CERT_C-EXP19-a-2

65:

Parameter 'state' is not validated before use

CERT_C-API00-a-3

69:

Implicit conversion from 'unsigned char' type to 'signed char' type in function's argument

CERT_C-INT02-a-2

/rmf_task_ros2_testing/src/rmf_task_ros2/Dispatcher.cpp

67:

The string literal is embedded directly in the code: $id

CERT_C-MSC41-a-1

67:

Undefined character was found

CERT_C-MSC09-a-3

83:

The 'make_schema_loader' function called during the initialization of the 'schema_loader' object should be declared as exception-safe

CERT_CPP-ERR58-a-2

83:

The 'make_schema_loader' function called during the initialization of the 'schema_loader' object should be declared as exception-safe

CERT_CPP-ERR50-f-3

86:

Parameter 'schema' is not validated before use

CERT_C-API00-a-3

86:

The parameter 'schema' of function 'make_validator' is passed by value

OPT-14-3

123:

Parameter 'api_id' is not validated before use

CERT_C-API00-a-3

132:

Parameter 'msg' is not validated before use

CERT_C-API00-a-3

132:

The parameter 'msg' of function 'add' is passed by value

OPT-14-3

136:

Unused function's "erase" return value

CERT_C-ERR33-a-1

136:

Unused function's "erase" return value

CERT_C-POS54-a-1

136:

Unused function's "erase" return value

CERT_C-EXP12-a-3

175:

The string literal is embedded directly in the code: patrol

CERT_C-MSC41-a-1

176:

The string literal is embedded directly in the code: delivery

CERT_C-MSC41-a-1

177:

The string literal is embedded directly in the code: clean

CERT_C-MSC41-a-1

185:

Constructor 'Implementation' allowing conversion should be made explicit

CODSTA-CPP-04-1

190:

The string literal is embedded directly in the code: bidding_time_window

CERT_C-MSC41-a-1

196:

Expression of type 'signed long' is assigned to expression of type 'unsigned long'

CERT_C-MEM02-a-3

196:

Function returning 'signed long' type is assigned to expression of type 'unsigned long'

CERT_C-MEM02-b-3

197:

The string literal is embedded directly in the code: terminated_tasks_max_size

CERT_C-MSC41-a-1

201:

Expression of type 'signed long' is assigned to expression of type 'int'

CERT_C-MEM02-a-3

201:

Function returning 'signed long' type is assigned to expression of type 'int'

CERT_C-MEM02-b-3

201:

Implicit conversion from 'signed long' type to 'signed int' type in assignment

CERT_C-INT02-a-2

202:

The string literal is embedded directly in the code: publish_active_tasks_period

CERT_C-MSC41-a-1

214:

The string literal is embedded directly in the code: task_api_requests

CERT_C-MSC41-a-1

222:

The string literal is embedded directly in the code: task_api_responses

CERT_C-MSC41-a-1

302:

The inner lambda should not capture by reference the 'relevant_tasks' local object from the outer lambda

CERT_CPP-EXP61-b-2

308:

Provide 'else' after the last 'else-if' construct

CERT_C-MSC01-a-2

322:

The string literal is embedded directly in the code: patrol

CERT_C-MSC41-a-1

337:

The string literal is embedded directly in the code: delivery

CERT_C-MSC41-a-1

370:

The string literal is embedded directly in the code: clean

CERT_C-MSC41-a-1

381:

Parameter 'msg' is not validated before use

CERT_C-API00-a-3

381:

Value 7 is out of acceptable range: 'lower than 7'

METRIC.NBD-3

404:

The string literal is embedded directly in the code: type

CERT_C-MSC41-a-1

420:

The string literal is embedded directly in the code: dispatch_task_request

CERT_C-MSC41-a-1

430:

The error from the 'validate' library function should be indicated by a return value instead of an exception

CERT_CPP-ERR59-a-1

430:

Unused function's "validate" return value

CERT_C-ERR33-a-1

430:

Unused function's "validate" return value

CERT_C-POS54-a-1

430:

Unused function's "validate" return value

CERT_C-EXP12-a-3

435:

The string literal is embedded directly in the code: code

CERT_C-MSC41-a-1

436:

The string literal is embedded directly in the code: Invalid request format

CERT_C-MSC41-a-1

436:

The string literal is embedded directly in the code: category

CERT_C-MSC41-a-1

437:

The string literal is embedded directly in the code: detail

CERT_C-MSC41-a-1

440:

The string literal is embedded directly in the code: success

CERT_C-MSC41-a-1

441:

The string literal is embedded directly in the code: errors

CERT_C-MSC41-a-1

444:

Declare local variable 'response' as const

CERT_C-DCL00-a-3

454:

The string literal is embedded directly in the code: request

CERT_C-MSC41-a-1

456:

The string literal is embedded directly in the code: category

CERT_C-MSC41-a-1

457:

The '++' operator should cause the only side effect in an expression

CERT_C-FIO41-e-3

457:

The string literal is embedded directly in the code: .dispatch-

CERT_C-MSC41-a-1

466:

The string literal is embedded directly in the code: success

CERT_C-MSC41-a-1

467:

The string literal is embedded directly in the code: state

CERT_C-MSC41-a-1

469:

Declare local variable 'response' as const

CERT_C-DCL00-a-3

489:

Parameter 'submission' is not validated before use

CERT_C-API00-a-3

489:

Value 7 is out of acceptable range: 'lower than 7'

METRIC.NBD-3

504:

The '++' operator should cause the only side effect in an expression

CERT_C-FIO41-e-3

504:

The string literal is embedded directly in the code: .dispatch-

CERT_C-MSC41-a-1

510:

The string literal is embedded directly in the code: unix_millis_earliest_start_time

CERT_C-MSC41-a-1

515:

The string literal is embedded directly in the code: priority

CERT_C-MSC41-a-1

516:

The string literal is embedded directly in the code: binary

CERT_C-MSC41-a-1

516:

The string literal is embedded directly in the code: type

CERT_C-MSC41-a-1

517:

The string literal is embedded directly in the code: value

CERT_C-MSC41-a-1

518:

The string literal is embedded directly in the code: category

CERT_C-MSC41-a-1

519:

The string literal is embedded directly in the code: description

CERT_C-MSC41-a-1

520:

The string literal is embedded directly in the code: labels

CERT_C-MSC41-a-1

520:

The string literal is embedded directly in the code: legacy_request

CERT_C-MSC41-a-1

522:

Unused function's "push_bid_notice" return value

CERT_C-ERR33-a-1

522:

Unused function's "push_bid_notice" return value

CERT_C-POS54-a-1

522:

Unused function's "push_bid_notice" return value

CERT_C-EXP12-a-3

531:

Parameter 'bid_notice' is not validated before use

CERT_C-API00-a-3

531:

The parameter 'bid_notice' of function 'push_bid_notice' is passed by value

OPT-14-3

534:

The string literal is embedded directly in the code: booking

CERT_C-MSC41-a-1

535:

The string literal is embedded directly in the code: id

CERT_C-MSC41-a-1

539:

The string literal is embedded directly in the code: unix_millis_earliest_start_time

CERT_C-MSC41-a-1

540:

The string literal is embedded directly in the code: priority

CERT_C-MSC41-a-1

541:

The string literal is embedded directly in the code: labels

CERT_C-MSC41-a-1

551:

The string literal is embedded directly in the code: category

CERT_C-MSC41-a-1

551:

The string literal is embedded directly in the code: category

CERT_C-MSC41-a-1

552:

The string literal is embedded directly in the code: description

CERT_C-MSC41-a-1

552:

The string literal is embedded directly in the code: detail

CERT_C-MSC41-a-1

554:

The string literal is embedded directly in the code: dispatch

CERT_C-MSC41-a-1

555:

The string literal is embedded directly in the code: queued

CERT_C-MSC41-a-1

555:

The string literal is embedded directly in the code: status

CERT_C-MSC41-a-1

559:

Declare local variable 'new_dispatch_state' as const

CERT_C-DCL00-a-3

572:

Parameter 'task_id' is not validated before use

CERT_C-API00-a-3

572:

Value 46 is out of acceptable range: 'lower than 30'

METRIC.CC-3

572:

Value 8 is out of acceptable range: 'lower than 7'

METRIC.NBD-3

580:

Use parenthesis to clarify order ('==' is the first operand of '||')

CERT_C-EXP00-a-3

581:

Use parenthesis to clarify order ('==' is the second operand of '||')

CERT_C-EXP00-a-3

645:

Declare local variable 'cancel_command' as const

CERT_C-DCL00-a-3

648:

The '++' operator should cause the only side effect in an expression

CERT_C-FIO41-e-3

674:

Value 43 is out of acceptable range: 'lower than 30'

METRIC.CC-3

674:

Value 8 is out of acceptable range: 'lower than 7'

METRIC.NBD-3

675:

Parameter 'task_id' is not validated before use

CERT_C-API00-a-3

676:

The parameter 'winner' of function 'conclude_bid' is passed by value

OPT-14-3

691:

Declare local variable 'dispatch_state' as const

CERT_C-DCL00-a-3

703:

The string literal is embedded directly in the code: code

CERT_C-MSC41-a-1

704:

The string literal is embedded directly in the code: category

CERT_C-MSC41-a-1

704:

The string literal is embedded directly in the code: unknown

CERT_C-MSC41-a-1

705:

The string literal is embedded directly in the code: detail

CERT_C-MSC41-a-1

721:

The string literal is embedded directly in the code: code

CERT_C-MSC41-a-1

722:

The string literal is embedded directly in the code: category

CERT_C-MSC41-a-1

722:

The string literal is embedded directly in the code: rejection

CERT_C-MSC41-a-1

723:

The string literal is embedded directly in the code: detail

CERT_C-MSC41-a-1

724:

The string literal is embedded directly in the code: No fleet adapters offered a bid for task [

CERT_C-MSC41-a-1

724:

The string literal is embedded directly in the code: ]

CERT_C-MSC41-a-1

733:

Identifier 'error' is hiding other identifier with the same name declared in outer scope

CERT_C-DCL01-b-3

762:

Declare local variable 'award_command' as const

CERT_C-DCL00-a-3

765:

The '++' operator should cause the only side effect in an expression

CERT_C-FIO41-e-3

773:

Parameter 'task_id' is not validated before use

CERT_C-API00-a-3

791:

Unused function's "erase" return value

CERT_C-ERR33-a-1

791:

Unused function's "erase" return value

CERT_C-POS54-a-1

791:

Unused function's "erase" return value

CERT_C-EXP12-a-3

801:

'for' statement in a function '()' should be followed by a block

CERT_C-EXP19-a-2

816:

Value 8 is out of acceptable range: 'lower than 7'

METRIC.NBD-3

819:

Variable "now" should be declared as locally as possible

CERT_C-DCL19-a-3

822:

Variable "timeout" should be declared as locally as possible

CERT_C-DCL19-a-3

824:

'for' statement in a function 'publish_lingering_commands' should be followed by a block

CERT_C-EXP19-a-2

865:

Unused function's "erase" return value

CERT_C-ERR33-a-1

865:

Unused function's "erase" return value

CERT_C-POS54-a-1

865:

Unused function's "erase" return value

CERT_C-EXP12-a-3

869:

Parameter 'ack' is not validated before use

CERT_C-API00-a-3

869:

Value 34 is out of acceptable range: 'lower than 30'

METRIC.CC-3

869:

Value 8 is out of acceptable range: 'lower than 7'

METRIC.NBD-3

879:

Unused function's "erase" return value

CERT_C-ERR33-a-1

879:

Unused function's "erase" return value

CERT_C-POS54-a-1

879:

Unused function's "erase" return value

CERT_C-EXP12-a-3

921:

Provide 'else' after the last 'else-if' construct

CERT_C-MSC01-a-2

936:

Parameter 'dispatcher_node_name' is not validated before use

CERT_C-API00-a-3

936:

The parameter 'dispatcher_node_name' of function 'init_and_make_node' is passed by value

OPT-14-3

938:

Do not pass the nonstandard-layout type object to the 'init' function defined in the library that may not be ABI-compatible

CERT_CPP-EXP60-a-1

944:

Parameter 'dispatcher_node_name' is not validated before use

CERT_C-API00-a-3

944:

The parameter 'dispatcher_node_name' of function 'make_node' is passed by value

OPT-14-3

951:

Parameter 'node' is not validated before use

CERT_C-API00-a-3

960:

Parameter 'task_description' is not validated before use

CERT_C-API00-a-3

966:

Parameter 'task_id' is not validated before use

CERT_C-API00-a-3

973:

Parameter 'task_id' is not validated before use

CERT_C-API00-a-3

999:

Declare parameter 'on_change_fn' as const

CERT_C-DCL00-a-3

999:

Parameter 'on_change_fn' is not validated before use

CERT_C-API00-a-3

999:

The parameter 'on_change_fn' of function 'on_change' is passed by value

OPT-14-3

1005:

Parameter 'evaluator' is not validated before use

CERT_C-API00-a-3

/rmf_task_ros2_testing/src/rmf_task_ros2/bidding/AsyncBidder.cpp

44:

The parameter 'receive_notice' of function 'Implementation' is passed by value

OPT-14-3

63:

Parameter 'msg' is not validated before use

CERT_C-API00-a-3

90:

Parameter 'node' is not validated before use

CERT_C-API00-a-3

91:

Parameter 'receive_notice' is not validated before use

CERT_C-API00-a-3

91:

The parameter 'receive_notice' of function 'make' is passed by value

OPT-14-3

/rmf_task_ros2_testing/src/rmf_task_ros2/bidding/Auctioneer.cpp

24:

Value 7 is out of acceptable range: 'lower than 7'

METRIC.NBD-3

26:

The parameter 'result_callback' of function 'Implementation' is passed by value

OPT-14-3

60:

Parameter 'bid_notice' is not validated before use

CERT_C-API00-a-3

69:

Parameter 'msg' is not validated before use

CERT_C-API00-a-3

69:

Value 7 is out of acceptable range: 'lower than 7'

METRIC.NBD-3

80:

Provide 'else' after the last 'else-if' construct

CERT_C-MSC01-a-2

96:

Value 7 is out of acceptable range: 'lower than 7'

METRIC.NBD-3

122:

Value 33 is out of acceptable range: 'lower than 30'

METRIC.CC-3

122:

Value 7 is out of acceptable range: 'lower than 7'

METRIC.NBD-3

123:

Parameter 'bidding_task' is not validated before use

CERT_C-API00-a-3

141:

Unused function's "insert" return value

CERT_C-ERR33-a-1

141:

Unused function's "insert" return value

CERT_C-POS54-a-1

141:

Unused function's "insert" return value

CERT_C-EXP12-a-3

170:

Value 7 is out of acceptable range: 'lower than 7'

METRIC.NBD-3

189:

The "responses" variable may be accessed out of bounds at index "*choice.operator*()"

CERT_CPP-CTR50-a-2

189:

The "responses" variable may be accessed out of bounds at index "*choice.operator*()"

CERT_CPP-STR53-a-2

194:

Parameter 'node' is not validated before use

CERT_C-API00-a-3

195:

Parameter 'result_callback' is not validated before use

CERT_C-API00-a-3

195:

The parameter 'result_callback' of function 'make' is passed by value

OPT-14-3

196:

Parameter 'evaluator' is not validated before use

CERT_C-API00-a-3

206:

Parameter 'bid_notice' is not validated before use

CERT_C-API00-a-3

218:

Parameter 'evaluator' is not validated before use

CERT_C-API00-a-3

232:

Parameter 'responses' is not validated before use

CERT_C-API00-a-3

233:

Parameter 'eval' is not validated before use

CERT_C-API00-a-3

233:

The parameter 'eval' of function 'select_best' is passed by value

OPT-14-3

242:

Use parenthesis to clarify order ('<' is the second operand of '||')

CERT_C-EXP00-a-3

256:

Parameter 'responses' is not validated before use

CERT_C-API00-a-3

265:

Parameter 'responses' is not validated before use

CERT_C-API00-a-3

274:

Parameter 'responses' is not validated before use

CERT_C-API00-a-3

/rmf_task_ros2_testing/src/rmf_task_ros2/bidding/Response.cpp

26:

Parameter 'proposal' is not validated before use

CERT_C-API00-a-3

39:

Parameter 'task_id' is not validated before use

CERT_C-API00-a-3

/rmf_task_ros2_testing/src/rmf_task_ros2/bidding/internal_Auctioneer.hpp

76:

Parameter 'auctioneer' is not validated before use

CERT_C-API00-a-3

84:

Parameter 'auctioneer' is not validated before use

CERT_C-API00-a-3

85:

Parameter 'responses' is not validated before use

CERT_C-API00-a-3

Flow Analysis Legend:
Message - violation cause	Message - violation point	Message - path element annotation