CWE-1127

Compilation with Insufficient Warnings or Errors. [Bad-Coding-Practices, Improper-Adherence-To-Coding-Standards]

Required inputs: IR

The code is compiled without sufficient warnings enabled, which may prevent the detection of subtle bugs or quality issues.

This issue makes it more difficult to maintain the product, which indirectly affects security by making it more difficult or time-consuming to find and/or fix vulnerabilities. It also might make it easier to introduce vulnerabilities.

Excerpts from CWE [https://cwe.mitre.org], Copyright (C) 2006-2026, the MITRE Corporation. See section 9.4. "3rd-Party Licenses" in the documentation for full details.

Possible Messages

Key	Text	Severity	Disabled
cafe_message	{}	None	False

Options

• This rule shares the following common options: exclude_in_macros, exclude_messages_in_system_headers, excludes, extend_exclude_to_macro_invocations, includes, justification_checker, languages, post_processing, provider, report_at, severity

• The following places define options that affect this rule: Stylechecks, Analysis-GlobalOptions

message_predicate

message_predicate : typing.Callable[[Cafe_Message], bool] | None = None

If provided, a custom predicate to filter relevant messages. Receives the message node and should return True for messages to report.

 

reported_messages

reported_messages : set[int] | None = None

If provided, only messages of these types are reported.

 

reported_severities

reported_severities : set[str] = {'error', 'warning'}

List of severities to display.

 

show_error_number

show_error_number : bool = False

Whether to show the error number in the message text if use_error_number is false.

 

suppressed_messages

suppressed_messages : set[int] | None = None

Exclude specific messages from large sets of reported messages.

 

use_error_number

use_error_number : bool = False

Whether the error number from the frontend should be used.

 

use_rule_severity

use_rule_severity : bool = True

Whether the rule's severity or the compiler's severity should be used.