/* goodG2B() - use goodsource and badsink */ public static void GoodG2BSink(CWE191_Integer_Underflow__SByte_min_multiply_67a.Container dataContainer) { sbyte data = dataContainer.containerOne; if (data < 0) /* ensure we won't have an overflow */ { /* POTENTIAL FLAW: if (data * 2) < sbyte.MinValue, this will underflow */ sbyte result = (sbyte)(data * 2); IO.WriteLine("result: " + result); } }
/* goodB2G() - use badsource and goodsink */ public static void GoodB2GSink(CWE191_Integer_Underflow__SByte_min_multiply_67a.Container dataContainer) { sbyte data = dataContainer.containerOne; if (data < 0) /* ensure we won't have an overflow */ { /* FIX: Add a check to prevent an underflow from occurring */ if (data > (sbyte.MinValue / 2)) { sbyte result = (sbyte)(data * 2); IO.WriteLine("result: " + result); } else { IO.WriteLine("data value is too small to perform multiplication."); } } }