I tested this with packages from unstable from the moment the package
was built:
deb http://snapshot.debian.org/archive/debian/20180412T222117Z/ unstable main
cppcheck worked flawlessly in this environment. It only started crashing
when I upgraded libtinyxml2-6 (6.0.0+dfsg-1 -> 6.2.0+dfsg-1). This made
me think it's an ABI breakage in libtinyxml2.
And indeed, tinyxml 6.2.0 added a new member to the XMLDocument class:
https://github.com/leethomason/tinyxml2/commit/d946ddadc27cef72116237148f88593da57c894a#diff-f0c986b0c387a2c34d4d6232c8d8c86b
But SONAME wasn't bumped. :(
--
Jakub Wilk