File tree Expand file tree Collapse file tree 1 file changed +4
-4
lines changed
cpp/ql/src/Security/CWE/CWE-190 Expand file tree Collapse file tree 1 file changed +4
-4
lines changed Original file line number Diff line number Diff line change 44<qhelp >
55<overview >
66
7- <p >This code allocates memory using a size value based on user input
7+ <p >This code allocates memory using a size value based on user input,
88with no apparent bound on its magnitude being established. This allows
9- for arbitrary amounts of memory being allocated.</p >
9+ for arbitrary amounts of memory to be allocated.</p >
1010
1111<p >If the allocation size is calculated by multiplying user input by a
12- <code >sizeof</code > expression the multiplication can overflow. When
12+ <code >sizeof</code > expression, the multiplication can overflow. When
1313an integer multiplication overflows in C, the result wraps around and
1414can be much smaller than intended. A later attempt to write data into
15- the allocated memory can then be out-of- bounds.</p >
15+ the allocated memory can then be out of bounds.</p >
1616
1717</overview >
1818<recommendation >
You can’t perform that action at this time.
0 commit comments