...
It is important to ensure that the argument to method one()
is obtained from a volatile
variable or as a result of explicitly passing an integer value. Otherwise, a read of the variable that is being read argument may itself be susceptible to the described expose a vulnerability.
Semantics of volatile
do not guarantee the atomicity of complex operations that involve read-modify-write sequences such as incrementing a value. See CON01-J. Ensure visibility of shared variables and atomicity of composite operations for more information.
...