Wiki Markup |
---|
Narrower primitive types can be cast to wider types without any effect on the magnitude of numeric values. However, when the expressions are not _strictfp_, conversions from float to double may lose information about the overall magnitude of the converted value. \[[JLS 05|AA. Java References#JLS 05]\] Section 5.1.2. |
Conversion from int or long to float, or long to double can lead to loss of precision (loss of least significant bits). No runtime exception occurs despite the loss.
...
From | To | Description |
---|---|---|
int or long | integral type T | Sign extend corresponding 2's complement form |
char | integral type T | Zero extend representation of char value |
Noncompliant Code Example
In this noncompliant example, an int
is converted to float
. Since a floating point
number cannot be precise to 9 digits, the result of subtracting the original from this value is non-zero.
Code Block | ||
---|---|---|
| ||
class wideSampleWideSample { public static void main(String[] args) { int big = 1234567890; float approx = big; System.out.println(big - (int)approx); //ideally this should be zero but it prints -46 } } |
Compliant Solution
The significand part of a floating point
number can hold at most 23 bit values. Anything above this threshold is discarded due to precision loss, as is demonstrated in this compliant solution.
Code Block | ||
---|---|---|
| ||
class wideSampleWideSample { public static void main(String[] args) { int big = 1234567890; float approx = big; if(Integer.highestOneBit(big) <= Math.pow(2, 23)) { //the significand can store at most 23 bits System.out.println(big - (int)approx); //always prints zero now } else { //handle error //precision error } } } |
Risk Assessment
TODOCasting numeric types to wider floating-point types may lose information.
Rule | Severity | Likelihood | Remediation Cost | Priority | Level |
---|---|---|---|---|---|
INT33 INT03-J | ?? low ?? | unlikely | ?? medium | P?? | L?? |
Automated Detection
TODO
Related Vulnerabilities
Search for vulnerabilities resulting from the violation of this rule on the CERT website.
References
Wiki Markup |
---|
\[[JLS 05|AA. Java References#JLS 05]\] Section 5.1.2, Widening Primitive Conversion |