SonarSource Rules
  • Products

    In-IDE

    Code Quality and Security in your IDE with SonarQube Ide

    IDE extension that lets you fix coding issues before they exist!

    Discover SonarQube for IDE

    SaaS

    Code Quality and Security in the cloud with SonarQube Cloud

    Setup is effortless and analysis is automatic for most languages

    Discover SonarQube Cloud

    Self-Hosted

    Code Quality and Security Self-Hosted with SonarQube Server

    Fast, accurate analysis; enterprise scalability

    Discover SonarQube Server
  • SecretsSecrets
  • ABAPABAP
  • AnsibleAnsible
  • ApexApex
  • AzureResourceManagerAzureResourceManager
  • CC
  • C#C#
  • C++C++
  • CloudFormationCloudFormation
  • COBOLCOBOL
  • CSSCSS
  • DartDart
  • DockerDocker
  • FlexFlex
  • GitHub ActionsGitHub Actions
  • GoGo
  • HTMLHTML
  • JavaJava
  • JavaScriptJavaScript
  • JSONJSON
  • JCLJCL
  • KotlinKotlin
  • KubernetesKubernetes
  • Objective CObjective C
  • PHPPHP
  • PL/IPL/I
  • PL/SQLPL/SQL
  • PythonPython
  • RPGRPG
  • RubyRuby
  • RustRust
  • ScalaScala
  • ShellShell
  • SwiftSwift
  • TerraformTerraform
  • TextText
  • TypeScriptTypeScript
  • T-SQLT-SQL
  • VB.NETVB.NET
  • VB6VB6
  • XMLXML
  • YAMLYAML
C++

C++ static code analysis

Unique rules to find Bugs, Vulnerabilities, Security Hotspots, and Code Smells in your C++ code

  • All rules 798
  • Vulnerability14
  • Bug173
  • Security Hotspot19
  • Code Smell592

  • Quick Fix 99
Filtered: 38 rules found
convention
    Impact
      Clean code attribute
        1. Literal suffix "L" for long integers shall be upper case

           Code Smell
        2. Source code should only use /* ... */ style comments

           Code Smell
        3. Concept names should comply with a naming convention

           Code Smell
        4. Coroutine names should comply with a naming convention

           Code Smell
        5. Format strings should comply with ISO standards

           Code Smell
        6. Method overloads should be grouped together in the interface

           Code Smell
        7. Label names should comply with a naming convention

           Code Smell
        8. Enumeration values should comply with a naming convention

           Code Smell
        9. Enumeration names should comply with a naming convention

           Code Smell
        10. Namespace names should comply with a naming convention

           Code Smell
        11. "final" should not be used redundantly

           Code Smell
        12. Comment styles "//" and "/* ... */" should not be mixed within a file

           Code Smell
        13. Preprocessor directives should not be indented

           Code Smell
        14. "union" names should comply with a naming convention

           Code Smell
        15. "public", "protected" and "private" sections of a class should be declared in that order

           Code Smell
        16. C++ comments should be used

           Code Smell
        17. Track "TODO" and "FIXME" comments that do not contain a reference to a person

           Code Smell
        18. Multiple variables should not be declared on the same line

           Code Smell
        19. "struct" names should comply with a naming convention

           Code Smell
        20. File names should comply with a naming convention

           Code Smell
        21. Macro names should comply with a naming convention

           Code Smell
        22. Track lack of copyright and license headers

           Code Smell
        23. Comments should not be located at the end of lines of code

           Code Smell
        24. Functions without parameters should not use "(void)"

           Code Smell
        25. Assignment operators should return non-"const" reference to the assigned object

           Code Smell
        26. Statements should be on separate lines

           Code Smell
        27. Local variable and function parameter names should comply with a naming convention

           Code Smell
        28. Field names should comply with a naming convention

           Code Smell
        29. Lines should not end with trailing whitespaces

           Code Smell
        30. Files should end with a newline

           Code Smell
        31. Tabulation characters should not be used

           Code Smell
        32. Lines should not be too long

           Code Smell
        33. Class names should comply with a naming convention

           Code Smell
        34. Function names should comply with a naming convention

           Code Smell
        35. User-defined identifiers shall have an appropriate form

           Code Smell
        36. The "#include" directive shall be followed by either a "<filename>" or ""filename"" sequence

           Bug
        37. A "declaration" should not declare more than one variable or member variable

           Code Smell
        38. The lowercase form of "L" shall not be used as the first character in a literal suffix

           Code Smell

        User-defined identifiers shall have an appropriate form

        consistency - conventional
        maintainability
        Code Smell
        • convention
        • misra-c++2023
        • misra-required

        Why is this an issue?

        More Info

        This rule is part of MISRA C++:2023.

        Usage of this content is governed by Sonar’s terms and conditions. Redistribution is prohibited.

        Rule 5.10.1 - User-defined identifiers shall have an appropriate form

        [macro.names] Undefined 2
        [lex.name] NDR 3
        [lex.key]
        [extern.types]
        [usrlit.suffix]
        [namespace.std] Undefined 1
        [namespace.posix] Undefined 1

        Category: Required

        Analysis: Decidable,Single Translation Unit

        Amplification

        When introducing an identifier, it shall be formed according to the following rules:

        • A universal-character-name used at the start of an identifier shall be:
          • In the range [a-z], [A-Z] or _ or
          • Within the character class XID_Start, as defined by the Unicode standard UAX #44 .
        • A universal-character-name within an identifier shall be:
          • One of the characters allowed at the start of an identifier; or
          • Within the character class XID_Continue, as defined by the Unicode standard UAX #44 .
        • All identifiers shall conform to Normalization Form C, as specified in ISO/IEC 10646 .
        • An identifier shall not contain a double underscore __.
        • An identifier that is not used as a literal suffix shall not start with _.
        • A user-defined literal suffix shall start with a single _ and shall not be preceded by a space.

        A macro identifier shall additionally only be formed using characters in the ranges [A-Z], [0-9] and _.

        Other identifiers shall additionally:

        • Not be defined in namespace std, posix, or stdN, where 'N' is any number; and
        • Not appear in the list defined, final, override, clock_t, div_t, FILE, fpos_t, lconv, ldiv_t, mbstate_t, ptrdiff_t, sig_atomic_t, size_t, time_t, tm, va_list, wctrans_t, wctype_t or wint_t.

        Note: this rule does not apply to template specializations, as they do not introduce new identifiers — see [temp.expl.spec].

        Rationale

        This rule prohibits the introduction of an identifier with a reserved name, and restricts the characters permitted within identifiers to a subset of those that are currently permitted by the C++ Standard. This subset is aligned with Unicode recommendations that are expected to be adopted in a future revision of the C++ Standard.

        For macro names, this rule further restricts the set of permitted characters for the following reasons:

        • It enforces commonly accepted coding style;
        • It helps distinguishing macros from other identifiers;
        • It prevents collision with the name of an attribute defined within the C++ Standard or with any name defined in the C++ Standard Library, preventing undefined behaviour (even if the corresponding header file [1] is not explicitly included);
        • It prevents collision with keywords or alternative representations, preventing undefined behaviour.

        The restrictions always prohibit the use of identifiers that are only prohibited by the C++ Standard within certain contexts (and for which no diagnostic is required in some cases). This rule broadens the context in which these identifiers are not acceptable in order to reduce the risk of confusion.

        Example

        int32_t i﴾ = 2;                    // Non-compliant - character \ufd3e (even though
                                           // it may compile)
        
        #define identity(a) a              // Non-compliant - shall be in uppercase
        
        void f()
        {
          auto _i = 0;                     // Non-compliant - using a leading _, even at
                                           // local scope, is prohibited
        }
        
        void operator ""_km( long double );     // Compliant - will be called for 1.0_km
        void operator ""mil( long double );     // Non-compliant - user-defined literal
                                                // suffixes shall start with _
        
        double operator ""_Bq ( long double );  // Compliant
        double operator "" _Bq( long double );  // Non-compliant - _Bq is preceded by a
                                                // space, making it a reserved identifier
        
        namespace std42
        {
          inline namespace a
          {
            int i;                         // Non-compliant - defined within namespace stdN
          }
        }
        
        auto final = 42;                   // Non-compliant
        
        #include <cstdio>                  // Compliant - even though it introduces FILE
        
        namespace std
        {
          template <> struct hash< A >     // Rule does not apply
          {
            size_t operator()( const A & x ) const;
          };
        }
        

        Glossary

        [1] Header file

        A header file is considered to be any file that is included during preprocessing (for example via the #include directive), regardless of its name or suffix.

        Copyright The MISRA Consortium Limited © 2023

          Available In:
        • SonarQube IdeCatch issues on the fly,
          in your IDE
        • SonarQube CloudDetect issues in your GitHub, Azure DevOps Services, Bitbucket Cloud, GitLab repositories
        • SonarQube ServerAnalyze code in your
          on-premise CI

        © 2025 SonarSource Sàrl. All rights reserved.

        Privacy Policy | Cookie Policy | Terms of Use