Sin 3: Integer Overflows Summary

  • Do check all calculations used to determine memory allocations to check thatthe arithmetic cannot overflow.

  • Do check all calculations used to determine array indexes to check that the arithmetic cannot overflow.

  • Do use unsigned integers for array offsets and memory allocation sizes.

  • Do not think languages other than C/C++ are immune to integer overflows.



19 Deadly Sins of Software Security. Programming Flaws and How to Fix Them
Writing Secure Code
ISBN: 71626751
EAN: 2147483647
Year: 2003
Pages: 239

flylib.com © 2008-2017.
If you may any questions please contact us: flylib@qtcs.net