100 bugs in Open Source C/C++ projects

Source

• Abstract
• Introduction
• Samples of errors detected in various open-source projects
  • Errors of array and string handling
  • Undefined behavior
  • Errors relating to operation priorities.
  • Formatted output errors
  • Examples of misprints found in code
  • Incorrect use of base functions and classes
  • Examples of meaningless code
  • Always true or always false conditions
  • Code vulnerabilities
  • Copy-Paste
  • Late check of null pointers
  • Miscellaneous
• References

Abstract
This article demonstrates capabilities of the static code analysis methodology. The readers are offered to study the samples of one hundred errors found in open-source projects in C/C++. All the errors have been found with the PVS-Studio static code analyzer.