Page History

Decimal numbers cannot be precisely represented as a BigDecimal if the BigDecimal(double val) constructor is used.

Noncompliant Code Example

This noncompliant code example passes a double value to the BigDecimal constructor. Because of this, precision of the literal is affected.

Code Block

bgColor	#FFcccc

// prints 0.1000000000000000055511151231257827021181583404541015625
System.out.println(new BigDecimal(0.1));

This compliant solution passes the decimal literal as a String so that the BigDecimal(String val) constructor is invoked.

Code Block

bgColor	#ccccff

// prints 0.1
System.out.println(new BigDecimal("0.1"));

Using the BigDecimal constructor that accepts decimal literals can lead to loss of precision.

Guideline	Severity	Likelihood	Remediation Cost	Priority	Level
FLP08-J	low	probable	low	P6	L2

TODO

Search for vulnerabilities resulting from the violation of this guideline on the CERT website.

...