clang-tidy và cppcheck

#include <stdio.h>
#include <stdlib.h>
#include <string.h>

/* 1. Ro ri bo nho tren nhanh loi */
static char *doc_ten(const char *dd) {
    FILE *t = fopen(dd, "rb");
    if (!t) return NULL;
    char *dem = malloc(256);
    if (fread(dem, 1, 255, t) == 0) {
        fclose(t);
        return NULL;              /* quen free(dem) */
    }
    dem[255] = '\0';
    fclose(t);
    return dem;
}

/* 2. Dung sau khi giai phong */
static void sau_khi_tha(void) {
    char *p = malloc(16);
    free(p);
    strcpy(p, "abc");             /* dung sau khi tha */
}

/* 3. Gan trong dieu kien, va bien chua khoi tao */
static int lam(int *p) {
    int x;
    if (p = NULL) return -1;      /* gan chu khong so sanh */
    return x + *p;                /* x chua khoi tao */
}

/* 4. Bo dem co dinh voi ham khong gioi han */
static void chep(const char *nguon) {
    char dem[16];
    strcpy(dem, nguon);           /* co the tran */
    printf("%s\n", dem);
}

/* 5. Chia cho khong */
static int chia(int a) { return a / 0; }

int main(int argc, char **argv) {
    (void)argc;
    char *t = doc_ten(argv[1]);
    if (t) { chep(t); free(t); }
    sau_khi_tha();
    printf("%d\n", chia(5));
    return 0;
}

---
Checks: >
  -*,
  bugprone-*,
  cert-*,
  clang-analyzer-*,
  readability-braces-around-statements,
  readability-inconsistent-declaration-parameter-name,
  -bugprone-easily-swappable-parameters,
  -cert-err33-c
WarningsAsErrors: 'clang-analyzer-*'
HeaderFilterRegex: '.*'
FormatStyle: file

[
  {
    "directory": "/du-an",
    "command": "gcc -std=c11 -Wall -Wextra -Iinclude -c loi.c",
    "file": "loi.c"
  }
]

cppcheck \
    --enable=warning,style,performance,portability \
    --std=c11 \
    --inline-suppr \
    --error-exitcode=1 \
    --suppress=missingIncludeSystem \
    -I include \
    src/

# --enable=all bat ca "information" va "unusedFunction", cai thu hai
#   bao moi ham cong khai cua thu vien la "khong dung", nen rat on ao.
#   Liet ke ro tung nhom thay vi dung all.
# --inline-suppr cho phep tat bang binh luan trong ma.
# --error-exitcode=1 de CI do khi co loi.
# --suppress=missingIncludeSystem tat canh bao "khong tim thay
#   header he thong", vi cppcheck khong can chung.

#include <stdio.h>
#include <stdlib.h>
#include <string.h>

void an_toan(char *dich, const char *nguon) {
    /* Nguoi goi bao dam dich >= 256 va nguon < 200, xem giao_thuc.h:41 */
    strcpy(dich, nguon);   /* NOLINT(clang-analyzer-security.insecureAPI.strcpy) */
}

void khong_an_toan(char *dich, const char *nguon) {
    strcpy(dich, nguon);
}

/* 1. NOLINT co ten kiem tra cu the, tren MOT dong. Tot nhat. */
strcpy(dich, nguon);   /* NOLINT(clang-analyzer-security.insecureAPI.strcpy) */

/* 2. NOLINTNEXTLINE, khi dong da qua dai */
/* NOLINTNEXTLINE(bugprone-branch-clone) */
if (a) lam_x(); else lam_x();

/* 3. NOLINTBEGIN va NOLINTEND cho mot khoi */
/* NOLINTBEGIN(cert-err33-c) */
fclose(t1);
fclose(t2);
fclose(t3);
/* NOLINTEND(cert-err33-c) */

/* 4. NOLINT tran, tat MOI kiem tra. Tranh dung. */
strcpy(dich, nguon);   /* NOLINT */

/* Cua cppcheck: */
/* cppcheck-suppress memleak */
return NULL;

/* Hoac trong tep suppressions.txt: */
memleak:src/cu.c:112
uninitvar:src/tu-sinh/*