Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Updated references from C11->C23

The object representation for floating-point values is implementation defined. However, an implementation which that defines the __STDC_IEC_559__ macro shall conform to the IEC 60559 floating-point standard , and uses what is frequently referred to as IEEE 754 floating-point arithmetic [ISO/IEC 9899:20112024]. The floating-point object representation used by IEC 60559 is one of the most common floating-point object representations in use today.

All floating-point object representations uses use specific bit patterns to encode the value of the floating-point number being represented. However, equivalence of floating-point values is not encoded solely by the bit pattern used to represent the value. For instance, if the floating-point format supports negative zero values (as IEC 60559 does), the values -0.0 and 0.0 are equivalent and will compare as equal, but the bit patterns used in the object representation are not identical. Similarly, if two floating-point values are both (the same) NaN, they will not compare as equal, despite the bit patterns being identical, because they are not equivalent.

Do not compare floating-point object representations directly, such as by calling memcmp(), or its moral equivalents. Instead, the equality operators (== and !=) should be used to determine if two floating-point values are equivalent.

...

Using the object representation of floats a floating-point value for comparisons can lead to incorrect equality results, which can lead to unexpected behavior and incorrect results.

Rule

Severity

Likelihood

Remediation Cost

Priority

Level

FLP37-C

Low

Unlikely

Medium

P2

L3

Automated Detection

Tool

Version

Checker

Description

Astrée
Include Page
Astrée_V
Astrée_V
memcmp-with-floatPartially checked
Axivion Bauhaus Suite

Include Page
Axivion Bauhaus Suite_V
Axivion Bauhaus Suite_V

CertC-FLP37Fully implemented
Cppcheck Premium

Include Page
Cppcheck Premium_V
Cppcheck Premium_V

premium-cert-flp37-cFully implemented
Helix QAC

Include Page
Helix QAC_V
Helix QAC_V

C5026

C++3118


Klocwork

Include Page
Klocwork_V
Klocwork_V

MISRA.STDLIB.MEMCMP.PTR_ARG_TYPES
CERT.MEMCMP.FLOAT_MEMBER


LDRA tool suite
Include Page
LDRA_V
LDRA_V
618 SEnhanced Enforcement
Parasoft C/C++test

Include Page
Parasoft_V
Parasoft_V

CERT_C-FLP37-c

Do not use object representations to compare floating-point values

PC-lint Plus

Include Page
PC-lint Plus_V
PC-lint Plus_V

2498, 2499

Fully supported

Polyspace Bug Finder

Include Page
Polyspace Bug Finder_V
Polyspace Bug Finder_V

CERT C: Rule FLP37-CChecks for memory comparison of floating-point values (rule fully covered)
PVS-Studio

Include Page
PVS-Studio_V
PVS-Studio_V

V1014
RuleChecker

Include Page
RuleChecker_V
RuleChecker_V

memcmp-with-floatPartially checked
TrustInSoft Analyzer

Include Page
TrustInSoft Analyzer_V
TrustInSoft Analyzer_V


Exhaustively verified.

Related Vulnerabilities

Search for vulnerabilities resulting from the violation of this rule on the CERT website.

Related Guidelines

...

Bibliography

[ISO/IEC 9899:
2011
2024]Annex F, "ISO/IEC 60559 floating-point arithmetic"


...

Image Added Image Added Image Added