Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Parasoft Jtest 2022.2

Do not use Using the assignment operator in the outermost expression of an if or switch statement or a looping statement (while, do, or for) because it typically conditional expressions frequently indicates programmer error and can result in unexpected behavior. The assignment operator should not be used in the following contexts:

  • if  (controlling expression)
  • while (controlling expression)
  • do ... while (controlling expression)
  • for (second operand)
  • switch (controlling expression)
  • ?:  (first operand)
  • &&  (either operand)
  • ||  (either operand)
  • ?:  (second or third operands) where the ternary expression is used in any of these contexts

Noncompliant Code Example

In this noncompliant code example, an assignment expression is the outermost controlling expression in an the if statement .is an assignment expression:

Code Block
bgColor#FFcccc
public void f(boolean a, boolean b) {
  if (a = b) {
    /* ... */
  }
}

Although the programmer's intent of the code could be have been to assign b to a and test the value of the result, it is frequently a case of this usage frequently occurs when the programmer mistakenly using used the assignment operator = instead of rather than the equals equality operator ==.

Compliant Solution

When the assignment of b to a is unintended, this conditional block is now executed The conditional block shown in this compliant solution executes only when a is equal to b.:

Code Block
bgColor#ccccff
public void f(boolean a, boolean b) {
  if (a == b) {
    /* ... */
  }
}

Unintended assignment of b to a cannot occur.

Compliant Solution

When the assignment is intended, the following this compliant solution may be used because clarifies the programmer's intent is clearer:

Code Block
bgColor#ccccff
public void f(boolean a, boolean b) {
  if ((a = b) == true) {
    /* ... */
  }
}

Compliant Solution

It may be clearer to express the But it might be preferable to express this same logic as an explicit assignment followed by a conditionalthe if condition:

Code Block
bgColor#ccccff
public void f(boolean a, boolean b) {
  a = b;
  if (a) {
    /* ... */
  }
}

Risk Assessment

Errors of omission can result in unintended program flow.

Guideline

Severity

Likelihood

Remediation Cost

Priority

Level

EXP51-JG

low

likely

medium

P6

L2

Related Guidelines

Noncompliant Code Example

In this noncompliant code example, an assignment expression appears as an operand of the && operator:

Code Block
bgColor#FFcccc
public void f(boolean a, boolean b, boolean flag) {
  while ( (a = b) && flag ) {
    /* ... */
  }
}

Because && is not a comparison operator, assignment is an illegal operand. Again, this is frequently a case of the programmer mistakenly using the assignment operator = instead of the equals operator ==.

Compliant Solution

When the assignment of b to a is unintended, this conditional block is now executed only when a is equal to b and flag is true:

Code Block
bgColor#ccccff
public void f(boolean a, boolean b, boolean flag) {
  while ( (a == b) && flag ) {
    /* ... */
  }
}

Applicability

The use of the assignment operator in controlling conditional expressions frequently indicates programmer error and can result in unexpected behavior.

As an exception to this guideline, it is permitted to use the assignment operator in conditional expressions when the assignment is not the controlling expression (that is, the assignment is a subexpression), as shown in the following compliant solution:

Code Block
bgColor#ccccff
public void assignNocontrol(BufferedReader reader)
    throws IOException{
  String line;
  while ((line = reader.readLine()) != null) {
    // ... Work with line
  }
}

Automated Detection

ToolVersionCheckerDescription
Parasoft Jtest
Include Page
Parasoft_V
Parasoft_V
CERT.EXP51.ASIAvoid assignment within a condition
PVS-Studio

Include Page
PVS-Studio_V
PVS-Studio_V

V6041
SonarQube
Include Page
SonarQube_V
SonarQube_V
AssignmentInSubExpressionCheck

CERT C Secure Coding Standard

EXP18-C. Do not perform assignments in selection statements

CERT C++ Secure Coding Standard

EXP19-CPP. Do not perform assignments in conditional expressions

ISO/IEC TR 24772:2010

"Likely Incorrect Expression [KOA]"

MITRE CWE

CWE ID 480, "Use of Incorrect Operator"


Bibliography

...

[Hatton 1995]

Section 2

§2.7.2, "Errors of

omission

Omission and

addition"

 

EXP03-J. Do not use the equality operators when comparing values of boxed primitives    

Addition"


...

Image Modified Image Modified Image Modified