Page History

LANG.TYPE.AWID
LANG.TYPE.OWID

LANG.CAST.VALUE
LANG.CAST.COERCE

ALLOC.SIZE.ADDOFLOW
ALLOC.SIZE.IOFLOW
ALLOC.SIZE.MULOFLOW
ALLOC.SIZE.SUBUFLOW
ALLOC.SIZE.TRUNC
MISC.MEM.SIZE.ADDOFLOW
MISC.MEM.SIZE.BAD
MISC.MEM.SIZE.MULOFLOW
MISC.MEM.SIZE.SUBUFLOW
MISC.MEM.SIZE.TRUNC

Expression value widened by assignment
Expression value widened by other operand

Cast alters value
Coercion alters value

Addition overflow of allocation size
Integer overflow of allocation size
Multiplication overflow of allocation size
Subtraction underflow of allocation size
Truncation of allocation size
Addition overflow of size
Unreasonable size argument
Multiplication overflow of size
Subtraction underflow of size
Truncation of size

Can detect violations of this rule. It should look for patterns of (a op1 b) op2 c where

• • c has a bigger type than a or b
  • Neither a nor b is typecast to c's type
  • op2 is assignment or comparison

CERT_C-INT18-a
CERT_C-INT18-b
CERT_C-INT18-c

Avoid possible integer overflow in expressions in which the result is assigned to a variable of a wider integer type
Avoid possible integer overflow in expressions in which the result is compared to an expression of a wider integer type
Avoid possible integer overflow in expressions in which the result is cast to a wider integer type

Integer conversion overflow

Integer overflow

Tainted sign change conversion

Unsigned integer conversion overflow

MISRA C:2012 Rule 10.4

MISRA C:2012 Rule 10.6

MISRA C:2012 Rule 10.7

CERT C: Rec. INT18-C

Checks for integer overflow and unsigned integer overflow (rec. fully covered)

Overflow when converting between integer types

Overflow from operation between integers

Value from an unsecure source changes sign

Overflow when converting between unsigned integer types

Both operands of an operator in which usual arithmetic conversions are performed shall have the same category

The value of a composite expression shall not be assigned to an object with wider essential type

If a composite expression is used as one operand of an operator in which the usual arithmetic conversions are performed then the other operand shall not have wider essential type

1890, 1891, 1892,
1893,1894, 1895,
4490, 4491, 4492