Page History

Narrower arithmetic types can be cast to wider types without any effect on the magnitude of numeric values. However, whereas integer types represent exact values, floating-point types point types have limited precision. The C Standard,  66.3.1.4 paragraph 2 3 [ISO/IEC 9899:20112024], states:

When a value of integer type is converted to a real standard floating type, if the value being converted can be represented exactly in the new type, it is unchanged. If the value being converted is in the range of values that can be represented but cannot be represented exactly, the result is either the nearest higher or nearest lower representable value, chosen in an implementation-defined manner. If the value being converted is outside the range of values that can be represented, the behavior is is undefined. Results of some implicit conversions may be represented in greater range and precision than that required by the new type (see 6.3.1.8 and 6.8.67.45). 

Conversion from integral types to floating-point types without sufficient precision can lead to loss of precision (loss of least significant bits). No runtime exception occurs despite the loss.

...

#include <stdio.h>

int main(void) {
  long int big = 12345678901234567890L;
  float approx = big;
  printf("%d%ld\n", (big - (long int)approx));
  return 0;
}

...

This compliant solution replaces the type float with a double. Furthermore, it uses an assertion to guarantee that the double type can represent any long int without loss of precision. (see See INT35-C. Use correct integer precisions and MSC11-C. Incorporate diagnostic tests using assertions.):

#include <assert.h>
#include <float.h>
#include <limits.h>
#include <stdio<math.h>
#include <float<stdint.h>
#include <limits<stdio.h>

extern size_t popcount(uintmax_t); /* See INT35-C */
#define PRECISION(umax_value) popcount(umax_value) 

int main(void) {
  assert(PRECISION(LONG_MAX) <= DBL_MANT_DIG * log2(DBLFLT_MANT_DIGRADIX));
  long int big = 12345678901234567890L;
  double approx = big;
  printf("%d%ld\n", (big - (long int)approx));
  return 0;
}

...

Conversion from integral types to floating-point types without sufficient precision can lead to loss of precision (loss of least significant bits).

Automated Detection

Related Vulnerabilities

Search for vulnerabilities resulting from the violation of this rule on the CERT website.

Related Guidelines

Key here (explains table format and definitions)

Bibliography

...

...

Image Modified Image Modified Image Modified