Weakness (CWE)
CWE-1335: Incorrect Bitwise Shift of Integer
An integer value is specified to be shifted by a negative amount or an amount greater than or equal to the number of bits contained in the value.
More detail
Specifying a value to be shifted by a negative amount is undefined in various languages. Various computer architectures implement this action in different ways. The compilers and interpreters when generating code to accomplish a shift generally do not do a check for this issue.
Specifying an over-shift - a shift greater than or equal to the number of bits contained in a value to be shifted - produces a result that varies by architecture and compiler. In some languages, this action is undefined.
How to prevent it (1 mitigation)
-
Implementation
Implicitly or explicitly add checks and mitigation for negative or over-shift values.
Source: MITRE CWE-1335
0 results · Clear filters · Feed