...
Rule | Severity | Likelihood | Remediation Cost | Priority | Level |
|---|---|---|---|---|---|
NUM00-J | Medium | Unlikely | Medium | P4 | L3 |
Automated Detection
Automated detection of integer operations that can potentially overflow is straightforward. Automatic determination of which potential overflows are true errors and which are intended by the programmer is infeasible. Heuristic warnings might be helpful.
Tool | Version | Checker | Description | ||||||
|---|---|---|---|---|---|---|---|---|---|
| CodeSonar |
| JAVA.MATH.ABSRAND | Abs on random (Java) | ||||||
| Coverity | 7.5 | BAD_SHIFT | Implemented | ||||||
| Parasoft Jtest |
| CERT.NUM00.ICO CERT.NUM00.BSA CERT.NUM00.CACO | Avoid calculations which result in overflow or NaN Do not use an integer outside the range of [0, 31] as the amount of a shift Avoid using compound assignment operators in cases which may cause overflow | ||||||
| PVS-Studio |
| V5308, V6117 |
...
INT32-C. Ensure that operations on signed integers do not result in overflow | |
| ISO/IEC TR 24772:2010 | Wrap-around Error [XYY] |
CWE-682, Incorrect Calculation |
...