Page History

Compass/ROSE

Can detect violations of this rule by ensuring that operations are checked for overflow before being performed. Be mindful of exception INT30-EX2 because it excuses many operations from requiring validation, including all the operations that would validate a potentially dangerous operation. For instance, adding two unsigned ints together requires validation involving subtracting one of the numbers from UINT_MAX, which itself requires no validation because it cannot wrap

Fortify SCA

5.0

Can detect violations of this rule with the CERT C Rule Pack

2910 (C)
2911 (D)
2912 (A)
2913 (S)
3302
3303
3304