...
Non-Compliant Code Example
This non-compliant code example can result in an unsigned wrap during the shift operation of the unsigned operands ui1 and ui2. If this behavior is unanticipated, the resulting value may be used to allocate insufficient memory for a subsequent operation or in some other manner that could lead to an exploitable vulnerability.left shifting the unsigned operand ui1 by ui2 bits.
| Code Block | ||
|---|---|---|
| ||
unsigned int ui1, ui2, uresult; uresult = ui1 << ui2; |
...
INT32-EX1. Unsigned integers can exhibit modulo behavior (wrapping) only when this behavior is necessary for the proper execution of the program. It is recommended that the variable declaration be clearly commented as supporting modulo behavior and that each operation on that integer also be clearly commented as supporting modulo behavior.
...