You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 36 Next »

Do not use the assignment operator in conditional expressions because it typically indicates programmer error and can result in unexpected behavior.  This means that the assignment operator should not be used in the following contexts:

  • if  (controlling expression)
  • while (controlling expression)
  • do ... while (controlling expression)
  • for (second operand)
  • switch (controlling expression)
  • ?:  (first operand)
  • &&  (either operand)
  • ||  (either operand)
  • ?:  (second or third operands) where the ternary expression is used in any of these contexts

Noncompliant Code Example

In this noncompliant code example, an assignment expression is the controlling expression in an if statement.

public void f(boolean a, boolean b) {
  if (a = b) {
    /* ... */
  }
}

Although the intent of the code could be to assign b to a and test the value of the result, it is frequently a case of the programmer mistakenly using the assignment operator = instead of the equals operator ==.

Compliant Solution

When the assignment of b to a is unintended, this conditional block is now executed when a is equal to b.

public void f(boolean a, boolean b) {
  if (a == b) {
    /* ... */
  }
}

When the assignment is intended, the following compliant solution may be used because the programmer's intent is clearer:

public void f(boolean a, boolean b) {
  if ((a = b) == true) {
    /* ... */
  }
}

But it might be preferable to express this same logic as an assignment followed by a conditional:

public void f(boolean a, boolean b) {
  a = b;
  if (a) {
    /* ... */
  }
}

Noncompliant Code Example

In this noncompliant code example, an assignment expression is the controlling expression is used with the && operator.

public void f(boolean a, boolean b, boolean flag) {
  while ( (a = b) && flag ) {
    /* ... */
  }
}

Again, this is frequently a case of the programmer mistakenly using the assignment operator = instead of the equals operator ==.

Compliant Solution

When the assignment of b to a is unintended, this conditional block is now executed when a is equal to b.

public void f(boolean a, boolean b) {
  while ( (a == b) && flag ) {
    /* ... */
  }
}

When the assignment is intended, one of the same solutions should be used as shown above.

Applicability

Errors of omission can result in unintended program flow.

ISO/IEC TR 24772:2010

"Likely Incorrect Expression [KOA]"

MITRE CWE

CWE ID 480, "Use of Incorrect Operator"

Bibliography

[Hatton 1995]

Section 2.7.2, "Errors of omission and addition"

  • No labels