...
The following sections examine specific operations that are susceptible to integer overflow. The specific tests that are required to guarantee that the operation does not result in an integer overflow depend on the signedness of the integer types. When operating on small types (smaller than int), integer conversion rules apply. The usual arithmetic conversions may also be applied to (implicitly) convert operands to equivalent types before arithmetic operations are performed. Make sure you understand implicit conversion rules before trying to implement secure arithmetic operations.
----
| Include Page |
|---|
| c:INT32-C-a. Ensure that integer addition operations do not result in an overflow |
|---|
| c:INT32-C-a. Ensure that integer addition operations do not result in an overflow |
|---|
|
----
| Include Page |
|---|
| c:INT32-C-b. Ensure that integer subtraction operations do not result in an overflow |
|---|
| c:INT32-C-b. Ensure that integer subtraction operations do not result in an overflow |
|---|
|
----
| Anchor |
|---|
| Multiplication |
|---|
| Multiplication |
|---|
|
| Include Page |
|---|
| c:INT32-C-c. Ensure that integer multiplication operations do not result in an overflow |
|---|
| c:INT32-C-c. Ensure that integer multiplication operations do not result in an overflow |
|---|
|
----
| Include Page |
|---|
| c:INT32-C-d. Ensure that integer division operations do not result in an overflow |
|---|
| c:INT32-C-d. Ensure that integer division operations do not result in an overflow |
|---|
|
----
| Anchor |
|---|
| Unary Negation |
|---|
| Unary Negation |
|---|
|
| Include Page |
|---|
| c:INT32-C-e. Ensure that integer unary negation operations do not result in an overflow |
|---|
| c:INT32-C-e. Ensure that integer unary negation operations do not result in an overflow |
|---|
|
----
| Anchor |
|---|
| Left Shift Operator |
|---|
| Left Shift Operator |
|---|
|
| Include Page |
|---|
| c:INT32-C-f. Ensure that integer left shift operations do not result in an overflow |
|---|
| c:INT32-C-f. Ensure that integer left shift operations do not result in an overflow |
|---|
|
----
| Anchor |
|---|
| Right Shift Operator |
|---|
| Right Shift Operator |
|---|
|
...
Rule | Severity | Likelihood | Remediation Cost | Priority | Level |
|---|
INT32-C | 3 (high) | 2 (probable) | 1 (high) | P6 | L2 |
References
- ISO/IEC 9899-1999 Section 6.5, "Expressions," and Section 7.10, "Sizes of integer types <limits.h>"
- Seacord 05 Chapter 5, "Integers"
- Warren 02 Chapter 2, "Basics"
- Viega 05 Section 5.2.7, "Integer overflow"
- Dowd 06 Chapter 6, "C Language Issues" (Arithmetic Boundary Conditions, pp. 211-223)
