Example #1
0
        /* goodG2B() - use goodsource and badsink */
        private static void GoodG2B()
        {
            sbyte data = CWE191_Integer_Underflow__SByte_min_multiply_61b.GoodG2BSource();

            if (data < 0) /* ensure we won't have an overflow */
            {
                /* POTENTIAL FLAW: if (data * 2) < sbyte.MinValue, this will underflow */
                sbyte result = (sbyte)(data * 2);
                IO.WriteLine("result: " + result);
            }
        }
Example #2
0
        /* goodB2G() - use badsource and goodsink */
        private static void GoodB2G()
        {
            sbyte data = CWE191_Integer_Underflow__SByte_min_multiply_61b.GoodB2GSource();

            if (data < 0) /* ensure we won't have an overflow */
            {
                /* FIX: Add a check to prevent an underflow from occurring */
                if (data > (sbyte.MinValue / 2))
                {
                    sbyte result = (sbyte)(data * 2);
                    IO.WriteLine("result: " + result);
                }
                else
                {
                    IO.WriteLine("data value is too small to perform multiplication.");
                }
            }
        }