PVS-Studio 7.42 is now released. This version features expanded support for MISRA C++ 2023, a plugin for Qt Creator 19, official integration with CMake, and other useful improvements. Keep reading for details.
Testing JavaScript and Go analyzers
On April 6, we launched an open testing period for our new code analyzers for JavaScript and Go. Before officially releasing these new tools, it is crucial for us to thoroughly test them and collect user feedback.
The initial versions of JavaScript and Go analyzers each include twenty diagnostic rules, a command-line interface (CLI), and plugins for WebStorm and GoLand.
One month later, a TypeScript analyzer and a new version of the Visual Studio Code extension with support for the new analyzers will become available for testing.
Additionally, the PVS-Studio Atlas code quality management platform is also available for testing. It is a new solution for managing analysis results, which enables users to mark warnings.
To take part in the testing program, please fill out the form on our website.
MISRA C++ 2023
The previous PVS-Studio release introduced coverage for 86% of the MISRA C 2023 standard.
However, our implementation of MISRA standards remains in active development. Starting with this version, we initiated the implementation of the MISRA C++ 2023 standard.
We have adapted 22 existing diagnostic rules from the MISRA group to align with the MISRA C++ 2023 standard. Additionally, it is now possible to select the MISRA C++ version within PVS-Studio IDE plugins and command-line utilities.
You can learn more about MISRA standards support on this page.
Changes to the free licensing policy
We have discontinued support for the free usage of the analyzer via special comments in the code. If you have been using the analyzer this way, you will need to get an activation key via one of the other available methods.
Changes have also been made to the free usage terms for students and educators. The student licensing program is currently paused while we refine its updated terms and conditions. We will announce them when student license applications are open again. To stay updated, you are welcome to subscribe to our newsletter.
The terms for free licensing for open-source projects, public security experts, and Microsoft MVPs remain unchanged. You can read more about these terms at this link.
New integrations
Qt Creator 19
Support for the PVS-Studio plugin for Qt Creator versions 19.x has been added. The plugin enables running analysis, reviewing warnings, and working with code without leaving a familiar development environment.
Support for the plugin for Qt Creator versions 13.x has been discontinued. We strive to maintain backward compatibility for the latest plugin versions across all Qt Creator releases from the past two years.
Learn more about working with the plugin in the documentation.
Official integration with CMake
Starting with version 4.3.0, the CMake build system includes a built-in mechanism for working with PVS-Studio. This allows analyzer warnings to appear directly during the project compilation process.
You can read more about this in the documentation.
End of support for the 64-bit error diagnostic rules
Starting with this release, we have suspended further development of diagnostic rules from the "64-bit error diagnostic rules" group. These rules will no longer be enhanced and may be disabled in future releases.
If you rely on these rules, please contact our support team so we can assist you in finding a replacement or offer an alternative solution.
Analyzer improvements
The C and C++ analyzer has reduced analysis time for template-heavy code thanks to an improved handling mechanism. Evaluation and analysis of simple functions have also been enhanced based on the context in which they are called.
The C# analyzer now includes additional debugging mechanisms. A new warning, V053, is issued when the analyzer cannot obtain built-in .NET types. The --createBinaryLogs flag has been added to log the operation of Roslyn mechanisms. More details are available in the documentation.
In the C# analyzer, we have also fixed an issue that occurred when checking non-SDK-style .NET Framework projects following an update to Visual Studio 2026 version 18.4.0 or later.
New diagnostic rules
C and C++
- V1119. Preprocessing directive is present within a macro argument. This leads to undefined behavior.
C
- V3232. Use of externally-controlled format string. Potentially tainted data is used as a format string.
Java
- V6133. Dereferencing the parameter without a null check. Passing the 'null' value to the 'equals' method should not cause 'NullPointerException'.
- V6134. It is not recommended to throw exceptions from the 'equals' method.
Articles
Here is our traditional roundup of blog articles! Over the past two months, we've posted articles exploring vibe coding, breaking down various C++ code nuances, and much more. Here is a full list of articles covering various topics.
C and C++
- How far does lookup see in C++?
- Comments that outlived errors
- Is OpenBSD... exotic? Community member's perspective
- Let's dig into some vibe code
- How catch-block selection works in exception handling
C
Java
Go
Other
Webinars
Integrating SAST into DevSecOps
As software delivery accelerates, security must move at the same speed. In this webinar, we explored how to effectively integrate Static Application Security Testing (SAST) into your DevSecOps pipeline. The session covered strategies for identifying vulnerabilities early, reducing risk, and streamlining secure development processes.
Also, the session provided actionable insights for teams looking to modernize their security practices and optimize existing workflows.
Let's make a programming language. Intro
We're kicking off a webinar series on how to build your own programming language in C++.
In this first session, we'll break down—step by step and in plain terms—what's inside the "black box": the lexer and parser, the semantic analyzer, and the evaluator. We'll discuss what these components are, why they're needed, and what exactly they do.
All recordings will be sent to registered participants after the webinar is finished.
If you'd like to see more webinars, we invite you to check out upcoming events on the webinar page.
Conclusion
If you would like to receive news about PVS-Studio releases, subscribe to our newsletter.
If you haven't checked your project with PVS-Studio yet, start with a trial license!
