Page Information

Title:	INT30-C. Ensure that unsigned integer operations do not wrap
Author:	Robert Seacord (Manager)	Apr 24, 2008
Last Changed by:	Joerg Herter	Oct 29, 2025
Tiny Link: (useful for email)	https://wiki.sei.cmu.edu/confluence/x/bNYxBQ
Export As:	Word · PDF

SEI CERT C Coding Standard (9)     Page: MEM35-C. Allocate sufficient memory for an object     Page: MEM03-C. Clear sensitive information stored in reusable resources     Page: ARR30-C. Do not form or use out-of-bounds pointers or array subscripts     Page: INT04-C. Enforce limits on integer values originating from tainted sources     Page: INT34-C. Do not shift an expression by a negative number of bits or by greater than or equal to the number of bits that exist in the operand     Page: MSC40-C. Do not violate constraints     Page: ARR38-C. Guarantee that library functions do not form invalid pointers     Page: INT32-C. Ensure that operations on signed integers do not result in overflow     Page: INT18-C. Evaluate integer expressions in a larger size before comparing or assigning to that size

Parent Page     Page: Rule 04. Integers (INT)

• fortify
• compass/rose
• cwe-190
• rose-possible
• android-applicable
• exceptions
• ptc
• rule
• int
• in-cpp

Time	Editor
Oct 29, 2025 04:58	Joerg Herter	View Changes
Jun 25, 2025 09:35	David Svoboda	View Changes
May 05, 2025 08:31	David Svoboda	View Changes
REM Cost Reform
Apr 14, 2025 15:07	David Svoboda	View Changes
Apr 14, 2025 15:06	David Svoboda

External Links (31)
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/display/c/INT02-C.+Unde…
    https://cwe.mitre.org/data/index.html131.html
    https://cwe.mitre.org/data/index.html680.html
    https://wiki.sei.cmu.edu/confluence/display/c/ARR36-C.+Do+n…
    https://pvs-studio.com/en/docs/warnings/v658/
    https://wiki.sei.cmu.edu/confluence/display/c/ARR30-C.+Do+n…
    https://www.mathworks.com/help/bugfinder/ref/certcruleint30…
    web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-1385
    https://cwe.mitre.org/data/index.html
    https://www.kb.cert.org/vulnotes/bymetric?searchview&query=…
    https://wiki.sei.cmu.edu/confluence/display/c/CON08-C.+Do+n…
    https://pvs-studio.com/en/docs/warnings/v5011/
    https://wiki.sei.cmu.edu/confluence/display/c/How+this+Codi…
    https://wiki.sei.cmu.edu/confluence/display/c/AA.+Bibliogra…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://pvs-studio.com/en/docs/warnings/v5005/
    xorl.wordpress.com/2009/06/10/cve-2009-1385-linux-kernel-e1…
    https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-4…
    https://wiki.sei.cmu.edu/confluence/display/c/PVS-Studio
    blog.securitymouse.com/2014/06/raising-lazarus-20-year-old-…
    https://wiki.sei.cmu.edu/confluence/display/c/SEI+CERT+C+Co…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?p…
    blog.binamuse.com/2014/09/coregraphics-memory-corruption.ht…
    https://pvs-studio.com/en/docs/warnings/v1028/
    cwe.mitre.org/data/definitions/190.html
    cwe.mitre.org/
    https://wiki.sei.cmu.edu/confluence/display/c/ARR37-C.+Do+n…
    https://cwe.mitre.org/data/index.html191.html
    https://pvs-studio.com/en/docs/warnings/v1012/

SEI CERT C Coding Standard (33)     Page: AA. Bibliography     Page: ARR37-C. Do not add or subtract an integer to a pointer to a non-array object     Page: Helix QAC     Page: ARR36-C. Do not subtract or compare two pointers that do not refer to the same array     Page: TrustInSoft Analyzer_V     Page: Cppcheck Premium     Page: TrustInSoft Analyzer     Page: Helix QAC_V     Page: INT02-C. Understand integer conversion rules     Page: INT34-C. Do not shift an expression by a negative number of bits or by greater than or equal to the number of bits that exist in the operand     Page: Coverity     Page: Rose     Page: Coverity_V     Page: Parasoft     Page: CodeSonar_V     Page: Klocwork     Page: LDRA     Page: Cppcheck Premium_V     Page: BB. Definitions     Page: ARR30-C. Do not form or use out-of-bounds pointers or array subscripts     Page: CodeSonar     Page: INT32-C. Ensure that operations on signed integers do not result in overflow     Page: Polyspace Bug Finder     Page: Parasoft_V     Page: Polyspace Bug Finder_V     Page: LDRA_V     Page: Astrée     Home page: SEI CERT C Coding Standard     Page: PVS-Studio_V     Page: RuleChecker_V     Page: Klocwork_V     Page: Astrée_V     Page: RuleChecker

SEI CERT C++ Coding Standard (1)     Page: Axivion Bauhaus Suite_V