Division and modulo operations are susceptible to divide-by-zero errors.

Division

The result of the / operator is the quotient from the division of the first arithmetic operand by the second arithmetic operand. Division operations are susceptible to divide-by-zero errors. Overflow can also occur during twos-complement signed integer division when the dividend is equal to the minimum (negative) value for the signed integer type and the divisor is equal to -1.

Modulo

The modulo operator provides the remainder when two operands of integer type are divided.

Risk Assessment

Rule

Severity

Likelihood

Remediation Cost

Priority

Level

INT33-C

2 (medium)

2 (probable)

2 (medium)

P8

L2

Examples of vulnerabilities resulting from the violation of this rule can be found on the CERTwebsite.

References

\[[ISO/IEC 9899-1999|AA. C References#ISO/IEC 9899-1999]\] Section 6.5.5, "Multiplicative operators"
\[[Seacord 05|AA. C References#Seacord 05]\] Chapter 5, "Integers"
\[[Warren 02|AA. C References#Warren 02]\] Chapter 2, "Basics"