...
The following sections examine specific operations that are susceptible to integer overflow. The specific tests that are required to guarantee that the operation does not result in an integer overflow depend on the signedness of the integer types. When operating on small types (smaller than int), integer conversion rules apply. The usual arithmetic conversions may also be applied to (implicitly) convert operands to equivalent types before arithmetic operations are performed. Make sure you understand implicit conversion rules before trying to implement secure arithmetic operations.
----
| Include Page |
|---|
| c:INT32-C-a. Ensure that integer addition operations do not result in an overflow |
|---|
| c:INT32-C-a. Ensure that integer addition operations do not result in an overflow |
|---|
|
----
| Include Page |
|---|
| c:INT32-C-b. Ensure that integer subtraction operations do not result in an overflow |
|---|
| c:INT32-C-b. Ensure that integer subtraction operations do not result in an overflow |
|---|
|
----
| Anchor |
|---|
| Multiplication |
|---|
| Multiplication |
|---|
|
| Include Page |
|---|
| c:INT32-C-c. Ensure that integer multiplication operations do not result in an overflow |
|---|
| c:INT32-C-c. Ensure that integer multiplication operations do not result in an overflow |
|---|
|
----
| Include Page |
|---|
| c:INT32-C-d. Ensure that integer division operations do not result in an overflow |
|---|
| c:INT32-C-d. Ensure that integer division operations do not result in an overflow |
|---|
|
----
| Anchor |
|---|
| Unary Negation |
|---|
| Unary Negation |
|---|
|
| Include Page |
|---|
| c:INT32-C-e. Ensure that integer unary negation operations do not result in an overflow |
|---|
| c:INT32-C-e. Ensure that integer unary negation operations do not result in an overflow |
|---|
|
----
| Anchor |
|---|
| Left Shift Operator |
|---|
| Left Shift Operator |
|---|
|
...
Rule | Severity | Likelihood | Remediation Cost | Priority | Level |
|---|
INT32-C | 3 (high) | 2 3 (probablelikely) | 1 (high) | P6 P9 | L2 |
Related Vulnerabilities
...
| Wiki Markup |
|---|
\[[Dowd 06|AA. C References#Dowd 06]\] Chapter 6, "C Language Issues" (Arithmetic Boundary Conditions, pp. 211-223)
\[[ISO/IEC 9899-1999|AA. C References#ISO/IEC 9899-1999]\] Section 6.5, "Expressions," and Section 7.10, "Sizes of integer types <limits.h>"
\[[Seacord 05|AA. C References#Seacord 05]\] Chapter 5, "Integers"
\[[Viega 05|AA. C References#Viega 05]\] Section 5.2.7, "Integer overflow"
\[[VU#551436|AA. C References#VU#551436]\]
\[[Warren 02|AA. C References#Warren 02]\] Chapter 2, "Basics" |
