May 2021 | C++ Team Blog

Microsoft C++ Code Analysis supports SARIF 2.1

Hwi-sung Im May 13, 2021 May 13, 2021 05/13/21

Starting with Visual Studio 16.8, MSVC Code Analysis officially supports SARIF 2.1.0 standard. SARIF is an industry standard for representing static analysis logs and we've been one of the earliest collaborators with the SARIF Technical Committee. Behind the scenes, analysis log files in the SARIF format powers Visual Studio IDE to ...

OpenMP Updates and Fixes for C++ in Visual Studio 2019 version 16.10

Chris Pulido May 12, 2021 May 12, 2021 05/12/21

In our previous blog post about improved OpenMP support in Visual Studio, we announced the addition of the -openmp:llvm switch in Visual Studio 2019 version 16.9 to enable compiled programs to target LLVM’s OpenMP runtime library for the x64 architecture. This switch supports all the OpenMP 2.0 directives that -openmp supports, as well as ...

New Static Analysis Rule for Bounds Checking

Jordan Maples May 11, 2021 May 11, 2021 05/11/21

We have added a new experimental static analysis rule in Visual Studio 16.10 version Preview 3 - C26458, WARNING_PATH_SENSITIVE_USE_GSL_AT. The new warning is a more precise and less noisy version of warning C26446, WARNING_USE_GSL_AT. Both warnings analyse standard containers for unchecked element access and they both share the warning ...

Finding Bugs with AddressSanitizer: Patterns from Open Source Projects

Kevin Cadieux May 10, 2021 May 10, 2021 05/10/21

AddressSanitizer (ASan) was officially released in Visual Studio 2019 version 16.9. We recently used this feature to find and fix a bug in the MSVC compiler itself. To further validate the usefulness of our ASan implementation, we also used it on a collection of widely used open source projects where it found bugs in Boost, Azure IoT C SDK, ...

2x-3x Performance Improvements for Debug Builds

Pranav Kant May 7, 2021 May 7, 2021 05/7/21

We have made substantial runtime performance improvements in the x86/x64 C++ compiler for Visual Studio's default debug configuration. For Visual Studio 2019 version 16.10 Preview 2, we measure 2x - 3x speedup for programs compiled in debug mode. These improvements come from reducing the overhead introduced by runtime checks (/...

Ignoring Automatic Initialization for Code Analysis

Gabor Horvath May 6, 2021 May 6, 2021 05/6/21

Reading uninitialized memory is one of the major sources of security vulnerabilities in C and C++ programs. Microsoft developed many tools to find such errors including compiler warnings, static analysis checks, and more recently: code instrumentation. For a more detailed overview of uninitialized memory related vulnerabilities and ...

Pure Virtual C++ 2021 is Today

Sy Brand May 3, 2021 May 3, 2021 05/3/21

Pure Virtual C++, a free one-day virtual conference for the whole C++ community, is starting today (May 3rd) at 14:30 UTC. You can watch it and interact with the speakers at Learn TV. There'll be sessions on C++20 modules, CMake, vcpkg, and code analysis. All of our pre-conference demos, including what's new in C++20 support in MSVC, ...

C++ Team Blog