SonarSource Rules
  • Products

    In-IDE

    Code Quality and Security in your IDE with SonarQube Ide

    IDE extension that lets you fix coding issues before they exist!

    Discover SonarQube for IDE

    SaaS

    Code Quality and Security in the cloud with SonarQube Cloud

    Setup is effortless and analysis is automatic for most languages

    Discover SonarQube Cloud

    Self-Hosted

    Code Quality and Security Self-Hosted with SonarQube Server

    Fast, accurate analysis; enterprise scalability

    Discover SonarQube Server
  • SecretsSecrets
  • ABAPABAP
  • AnsibleAnsible
  • ApexApex
  • AzureResourceManagerAzureResourceManager
  • CC
  • C#C#
  • C++C++
  • CloudFormationCloudFormation
  • COBOLCOBOL
  • CSSCSS
  • DartDart
  • DockerDocker
  • FlexFlex
  • GitHub ActionsGitHub Actions
  • GoGo
  • HTMLHTML
  • JavaJava
  • JavaScriptJavaScript
  • JSONJSON
  • JCLJCL
  • KotlinKotlin
  • KubernetesKubernetes
  • Objective CObjective C
  • PHPPHP
  • PL/IPL/I
  • PL/SQLPL/SQL
  • PythonPython
  • RPGRPG
  • RubyRuby
  • RustRust
  • ScalaScala
  • ShellShell
  • SwiftSwift
  • TerraformTerraform
  • TextText
  • TypeScriptTypeScript
  • T-SQLT-SQL
  • VB.NETVB.NET
  • VB6VB6
  • XMLXML
  • YAMLYAML
C++

C++ static code analysis

Unique rules to find Bugs, Vulnerabilities, Security Hotspots, and Code Smells in your C++ code

  • All rules 674
  • Vulnerability13
  • Bug139
  • Security Hotspot19
  • Code Smell503

  • Quick Fix 91
Filtered: 24 rules found
performance
    Impact
      Clean code attribute
        1. "std::format" should be used instead of standard output manipulators

           Code Smell
        2. Concatenated "std::format" outputs should be replaced by a single invocation

           Code Smell
        3. Use conditional suspension to resume current coroutine

           Code Smell
        4. rvalue reference members should not be copied accidentally

           Code Smell
        5. "std::string_view" and "std::span" parameters should be directly constructed from sequences

           Code Smell
        6. Empty class members should be marked as "[[no_unique_address]]"

           Code Smell
        7. Transparent function objects should be used with associative "std::string" containers

           Code Smell
        8. "emplace" should be prefered over "insert" with "std::set" and "std::unordered_set"

           Code Smell
        9. Unnecessary expensive copy should be avoided when using auto as a placeholder type

           Code Smell
        10. "try_emplace" should be used with "std::map" and "std::unordered_map"

           Code Smell
        11. Heterogeneous sorted containers should only be used with types that support heterogeneous comparison

           Bug
        12. Objects should not be created solely to be passed as arguments to functions that perform delegated object creation

           Code Smell
        13. "std::filesystem::path" should be used to represent a file path

           Code Smell
        14. Emplacement should be preferred when insertion creates a temporary with sequence containers

           Code Smell
        15. Return type of functions shouldn't be const qualified value

           Code Smell
        16. "std::endl" should not be used

           Code Smell
        17. Capture by reference in lambdas used locally

           Code Smell
        18. "std::move" should not inhibit optimizations

           Code Smell
        19. Template parameters should be preferred to "std::function" when configuring behavior at compile time

           Code Smell
        20. Special member function should not be defined unless a non standard behavior is required

           Code Smell
        21. Member data should be initialized in-class or in a constructor initialization list

           Code Smell
        22. Bit fields should not be used

           Code Smell
        23. The prefix increment/decrement form should be used

           Code Smell
        24. Pass by reference to const should be used for large input parameters

           Code Smell

        Template parameters should be preferred to "std::function" when configuring behavior at compile time

        intentionality - efficient
        maintainability
        Code Smell
        • cppcoreguidelines
        • performance
        • bad-practice

        Why is this an issue?

        How can I fix it?

        More Info

        To parametrize an algorithm with a function, you can use one of the following techniques:

        • A function pointer
        • A typed-erased function wrapper such as std::function (C++11) or std::move_only_function (C++23)
        • A template parameter

        S5205 explains why using function pointers is an inferior solution.

        Working with typed-erased function wrappers

        Thanks to type erasure, std::function is very flexible to use. You can store it in variables, including containers such as std::map<std::string, std::function<void(void)>>. In other words, std::function can represent any kind of functor, including lambdas, as long as their signatures are compatible.

        std::move_only_function is very similar to std::function. The main difference is that, as its name implies, it cannot be copied and has to be moved. You can use it to store a lambda capturing a non-copyable object such as std::unique_ptr, which cannot be done with std::function.

        The abstraction offered by std::function and std::move_only_function comes at a cost: a compiler typically cannot inline a call to these types due to the type erasure.

        Additionally, these wrappers can be "empty", meaning they do not currently represent any callable. While invoking an empty std::function throws a std::bad_function_call, invoking an empty std::move_only_function results in undefined behavior.

        Working with template-parameters

        Template parameters are less flexible than the type-erased wrapper: Each functor has its own type, which prevents storing different parameters together in a container even if they all have compatible signatures.

        On the other hand, since each template instance knows the type of the functor, calls can be inlined, making this a zero-cost abstraction.

        Additionally, template parameters representing lambdas cannot be "empty". Therefore, by construction, there is no risk of undefined behavior or the need to handle std::bad_function_call when invoking such parameters.

        Furthermore, C++20 concepts, such as std::predicate or std::regular_invocable, can enforce expected signatures and provide useful compile-time error messages when incorrect functors are passed to your parametrized function.

        Which solution to choose?

        In conclusion, if a functor is known at compile-time, you should prefer using a template parameter; if it has to be dynamic, a typed-erased function wrapper gives you greater flexibility.

        This rule detects function parameters of type std::function and std::move_only_function that can likely benefit from being replaced by a template parameter. It does so by looking at whether the functor is only called inside the function or if it participates in other operations.

        Exceptions

        This rule ignores virtual functions because they don’t work well with templates.

          Available In:
        • SonarQube IdeCatch issues on the fly,
          in your IDE
        • SonarQube CloudDetect issues in your GitHub, Azure DevOps Services, Bitbucket Cloud, GitLab repositories
        • SonarQube ServerAnalyze code in your
          on-premise CI
          Developer Edition
          Available Since
          9.1

        © 2008-2025 SonarSource SA. All rights reserved.

        Privacy Policy | Cookie Policy | Terms of Use