/* goodG2B() - use goodsource and badsink */ private static void GoodG2B() { byte data = CWE190_Integer_Overflow__Byte_max_multiply_61b.GoodG2BSource(); if (data > 0) /* ensure we won't have an underflow */ { /* POTENTIAL FLAW: if (data*2) > byte.MaxValue, this will overflow */ byte result = (byte)(data * 2); IO.WriteLine("result: " + result); } }
public override void Bad() { byte data = CWE190_Integer_Overflow__Byte_max_multiply_61b.BadSource(); if (data > 0) /* ensure we won't have an underflow */ { /* POTENTIAL FLAW: if (data*2) > byte.MaxValue, this will overflow */ byte result = (byte)(data * 2); IO.WriteLine("result: " + result); } }
/* goodB2G() - use badsource and goodsink */ private static void GoodB2G() { byte data = CWE190_Integer_Overflow__Byte_max_multiply_61b.GoodB2GSource(); if (data > 0) /* ensure we won't have an underflow */ { /* FIX: Add a check to prevent an overflow from occurring */ if (data < (byte.MaxValue / 2)) { byte result = (byte)(data * 2); IO.WriteLine("result: " + result); } else { IO.WriteLine("data value is too large to perform multiplication."); } } }