...
Operator | Overflow |
| Operator | Overflow |
| Operator | Overflow |
| Operator | Overflow |
|---|---|---|---|---|---|---|---|---|---|---|
yes |
| yes |
| yes |
| < | no | |||
yes |
| yes |
| >> | yes |
| > | no | ||
yes |
| yes |
| & | no |
| >= | no | ||
yes |
| %= | no |
| | | no |
| <= | no | |
% | no |
| yes |
| ^ | no |
| == | no | |
++ | yes |
| >>= | yes |
| ~ | no |
| != | no |
-- | yes |
| &= | no |
| ! | no |
| && | no |
= | no |
| |= | no |
| un + | no |
| || | no |
yes |
| ^= | no |
| yes |
| ?: | no |
| Wiki Markup |
|---|
The following sections examine specific operations that are susceptible to integer overflow. The specific tests that are required to guarantee that the operation does not result in an integer overflow depend on the signedness of the integer types. When operating on small types (smaller than {{int}}), integer conversion rules apply. The usual arithmetic conversions may also be applied to (implicitly) convert operands to equivalent types before arithmetic operations are performed. Make sure you understand implicit conversion rules before trying to implement secure arithmetic operations (see \[[INT02-A. |
Understand integer conversion rules]\]). |
----
| Anchor | ||||
|---|---|---|---|---|
|
| Include Page | ||||
|---|---|---|---|---|
|
----
| Anchor | ||||
|---|---|---|---|---|
|
| Include Page | ||||
|---|---|---|---|---|
|
----
| Anchor | ||||
|---|---|---|---|---|
|
| Include Page | ||||
|---|---|---|---|---|
|
----
| Anchor | ||||
|---|---|---|---|---|
|
| Include Page | ||||
|---|---|---|---|---|
|
----
| Anchor | ||||
|---|---|---|---|---|
|
| Include Page | ||||
|---|---|---|---|---|
|
----
| Anchor | ||||
|---|---|---|---|---|
|
| Include Page | ||||
|---|---|---|---|---|
|
Exceptions
INT32-EX1. Unsigned integers can be allowed to exhibit modulo behavior if and only ifonly when this behavior is necessary for the proper execution of the program. It is recommended that the variable declaration is clearly commented as supporting modulo behavior
...
and that each operation on that integer is also clearly commented as supporting modulo behavior
...
If the integer exhibiting modulo behavior contributes to the value of an integer not marked as exhibiting modulo behavior, the resulting integer must obey this rule.
Risk Assessment
Integer overflow can lead to buffer overflows and the execution of arbitrary code by an attacker.
...