When choosing a compiler (which should be understood to include the linker), a C99C-compliant compiler should be used whenever possible.
...
The possibilities for a given guideline are outlined in the table belowfollowing table.
The final possibility is that a tool has not implemented a checker for a specific guideline.
Compilers and source code analysis tools are trusted processes, meaning that a degree of reliance is placed on the output of the tools. Consequently, developers must ensure that this trust is not misplaced. Ideally, this should be achieved by the tool supplier running appropriate validation tests. While Although it is possible to use a validation suite to test a compiler or source code analysis tools, no formal validation scheme exists at this time.
False Positives
While Although many guidelines list common exceptions, it is difficult if not impossible to develop a complete list of exceptions for each guideline. Consequently, it is important that source code comply with the intent of each guideline and, to the greatest extent possible, tools minimize false positives which that do not violate the intent of the guideline. The degree to which tools minimize false-positive diagnostics is a quality of implementation issue.
...