Wiki Markup |
---|
According to the _Java Language Specification_ \[[JLS 2005|AA. Bibliography#JLS 05]\], Section 4§4.2.3, "Floating-Point Types, Formats, and Values" |
NaN
(not-a-number) is unordered, so the numerical comparison operators<
,<=
,>
, and>=
returnfalse
if either or both operands areNaN
. The equality operator==
returnsfalse
if either operand isNaN
, and the inequality operator!=
returnstrue
if either operand isNaN
.
Because this unordered property is often unexpected, problems can arise when programmers write code that compares floating-point values without considering the semantics of NaN
. For example, input validation checks that fail to consider the possibility of a NaN
value as input may can produce unexpected results. See guideline "NUM11-J. Check floating point inputs for exceptional values" for additional information.
...
This noncompliant code example attempts a direct comparison with NaN
. As per In accordance with the semantics of NaN
, all comparisons with NaN
yield false
(with the exception of the !=
operator, which returns true
). Consequently, this comparison always return false
, and the "result is NaN" message is never printed.
...
Automated detection of floating-point comparison operators is straightforward. Sound determination of whether the possibility of an unordered result has been correctly handled is not feasible in the general case. Heuristic checks could be useful.
FindBugs checks for the specific case of comparison with a constant NaN
.
Related Vulnerabilities
Search for vulnerabilities resulting from the violation of this guideline on the CERT website.
Bibliography
Bibliography
<ac:structured-macro ac:name="unmigrated-wiki-markup |
...
" ac:schema-version="1" ac:macro-id="e718a16e-6b90-4e87-8adf-32b44c9e92a3"><ac:plain-text-body><![CDATA[ | [[FindBugs |
...
2008 |
...
AA. |
...
Bibliography#FindBugs |
...
08] |
...
] |
...
FE: |
...
Doomed |
...
test |
...
for |
...
equality |
...
to |
...
NaN | ]]></ac:plain-text-body></ac:structured-macro> | ||
<ac:structured-macro ac:name="unmigrated-wiki-markup" ac:schema-version="1" ac:macro-id="d14a2e55-5ad8-4d15-83bb-e3998215fd2b"><ac:plain-text-body><![CDATA[ | [[JLS 2005 | AA. Bibliography#JLS 05]] | [§4.2.3, |
...
"Floating-Point |
...
Types, |
...
Formats, |
...
and |
...
Values |
...
" | http://java.sun.com/docs/books/jls/third_edition/html/typesValues.html#4.2.3] | ]]></ac:plain-text-body></ac:structured-macro> |
...
NUM09-J. Use the strictfp modifier for floating point calculation consistency across platforms 03. Numeric Types and Operations (NUM) NUM11-J. Check floating point inputs for exceptional values