...
Compass/ROSE can detect some violations of this rule easily. The difficulty comes in NOT incorrectly complaining on the compliant code examples. For instance, to validate addition between two signed ints, one might have to recognize code as complex as that specified in the compliant code example for addition...a very difficult task. A few tasks are doable, however:
...
. Specifically, it checks to ensure that the operand of a unary negation is compared to the type's minimum value immediately before the operation.
Related Vulnerabilities
Search for vulnerabilities resulting from the violation of this rule on the CERT website.
...