File tree Expand file tree Collapse file tree 1 file changed +4
-4
lines changed
cpp/ql/src/Security/CWE/CWE-190 Expand file tree Collapse file tree 1 file changed +4
-4
lines changed Original file line number Diff line number Diff line change 4
4
<qhelp >
5
5
<overview >
6
6
7
- <p >This code allocates memory using a size value based on user input
7
+ <p >This code allocates memory using a size value based on user input,
8
8
with no apparent bound on its magnitude being established. This allows
9
- for arbitrary amounts of memory being allocated.</p >
9
+ for arbitrary amounts of memory to be allocated.</p >
10
10
11
11
<p >If the allocation size is calculated by multiplying user input by a
12
- <code >sizeof</code > expression the multiplication can overflow. When
12
+ <code >sizeof</code > expression, the multiplication can overflow. When
13
13
an integer multiplication overflows in C, the result wraps around and
14
14
can be much smaller than intended. A later attempt to write data into
15
- the allocated memory can then be out-of- bounds.</p >
15
+ the allocated memory can then be out of bounds.</p >
16
16
17
17
</overview >
18
18
<recommendation >
You can’t perform that action at this time.
0 commit comments