/* goodG2B() - use goodsource and badsink */ public static void GoodG2BSink(CWE190_Integer_Overflow__UInt32_rand_multiply_67a.Container dataContainer) { uint data = dataContainer.containerOne; if (data > 0) /* ensure we won't have an underflow */ { /* POTENTIAL FLAW: if (data*2) > uint.MaxValue, this will overflow */ uint result = (uint)(data * 2); IO.WriteLine("result: " + result); } }
/* goodB2G() - use badsource and goodsink */ public static void GoodB2GSink(CWE190_Integer_Overflow__UInt32_rand_multiply_67a.Container dataContainer) { uint data = dataContainer.containerOne; if (data > 0) /* ensure we won't have an underflow */ { /* FIX: Add a check to prevent an overflow from occurring */ if (data < (uint.MaxValue / 2)) { uint result = (uint)(data * 2); IO.WriteLine("result: " + result); } else { IO.WriteLine("data value is too large to perform multiplication."); } } }