Page History

...

Code Block

bgColor	#ccccff
lang	c

void func(unsigned int ui_a, unsigned int ui_b) {
  unsigned int usum = ui_a + ui_b;
  if (usum < ui_a) {
    /* Handle error */
  }
  /* ... */
}

Compliant Solution (C23, Checked Integers)

This compliant solution uses the new-to-C23 checked integer arithmetic to safely perform integer addition:

Code Block

bgColor	#ccccff
lang	c

#include <stdckdint.h>

void func(unsigned int ui_a, unsigned int ui_b) {
  unsigned int usum;
  if (ckd_add(&usum, ui_a, ui_b)) {
    /* Handle error */
  }
  /* ... */
}

Anchor

	Subtraction
	Subtraction

...

Rule	Severity	Likelihood	Remediation Cost	Priority	Level
INT30-C	High	Likely	High	P9	L2

Automated Detection

Tool

Version

Checker

Description

Astrée

Include Page

	Astrée_V
	Astrée_V

integer-overflow

Fully checked

Axivion Bauhaus Suite

Include Page

	cplusplus:Axivion Bauhaus Suite_V
	cplusplus:Axivion Bauhaus Suite_V

CertC-INT30

Implemented

CodeSonar

Include Page

	CodeSonar_V
	CodeSonar_V

ALLOC.SIZE.ADDOFLOW
ALLOC.SIZE.IOFLOW
ALLOC.SIZE.MULOFLOW
ALLOC.SIZE.SUBUFLOW
MISC.MEM.SIZE.ADDOFLOW
MISC.MEM.SIZE.BAD
MISC.MEM.SIZE.MULOFLOW
MISC.MEM.SIZE.SUBUFLOW

Addition overflow of allocation size
Integer overflow of allocation size
Multiplication overflow of allocation size
Subtraction underflow of allocation size
Addition overflow of size
Unreasonable size argument
Multiplication overflow of size
Subtraction underflow of size

Compass/ROSE

Can detect violations of this rule by ensuring that operations are checked for overflow before being performed (Be mindful of exception INT30-EX2 because it excuses many operations from requiring validation, including all the operations that would validate a potentially dangerous operation. For instance, adding two unsigned ints together requires validation involving subtracting one of the numbers from UINT_MAX, which itself requires no validation because it cannot wrap.)

Coverity

Include Page

	Coverity_V
	Coverity_V

INTEGER_OVERFLOW

Implemented

Cppcheck Premium

Include Page

	Cppcheck Premium_V
	Cppcheck Premium_V

premium-cert-int30-c

Helix QAC

Include Page

	Helix QAC_V
	Helix QAC_V

C2910, C3383, C3384, C3385, C3386

C++2910

DF2911, DF2912, DF2913,

Klocwork

Include Page

	Klocwork_V
	Klocwork_V

NUM.OVERFLOW
CWARN.NOEFFECT.OUTOFRANGE
NUM.OVERFLOW.DF

LDRA tool suite

Include Page

	LDRA_V
	LDRA_V

493 S, 494 S

Partially implemented

Parasoft C/C++test

Include Page

	Parasoft_V
	Parasoft_V

CERT_C-INT30-a
CERT_C-INT30-b
CERT_C-INT30-c

Avoid wraparounds when performing arithmetic integer operations
Integer overflow or underflow in constant expression in '+', '-', '*' operator
Integer overflow or underflow in constant expression in '<<' operator

Polyspace Bug Finder

Include Page

	Polyspace Bug Finder_V
	Polyspace Bug Finder_V

CERT C: Rule INT30-C

Checks for:

Unsigned integer overflow
Unsigned integer constant overflow

Rule partially covered.

PVS-Studio

Include Page

	PVS-Studio_V
	PVS-Studio_V

V658, V1012, V1028, V5005, V5011

TrustInSoft Analyzer

Include Page

	TrustInSoft Analyzer_V
	TrustInSoft Analyzer_V

unsigned overflow

Exhaustively verified.

...

Space shortcuts

Page tree

Versions Compared

Old Version 177

New Version 178

Key

Compliant Solution (C23, Checked Integers)

Automated Detection