CWE-1335Incorrect Bitwise Shift of Integer

PUBLISHEDweakness record
released 2021-07-20 · last modified 2026-04-30

Metadata

CWE ID:
CWE-1335
摘要:
Base
结构:
Simple
状态:
Draft
发布日期:
2021-07-20
更新日期:
2026-04-30

名称

Incorrect Bitwise Shift of Integer

描述

An integer value is specified to be shifted by a negative amount or an amount greater than or equal to the number of bits contained in the value causing an unexpected or indeterminate result.

Specifying a value to be shifted by a negative amount is undefined in various languages. Various computer architectures implement this action in different ways. The compilers and interpreters when generating code to accomplish a shift generally do not do a check for this issue. Specifying an over-shift, a shift greater than or equal to the number of bits contained in a value to be shifted, produces a result which varies by architecture and compiler. In some languages, this action is specifically listed as producing an undefined result.

常见后果

范围:
Integrity
影响:
DoS: Crash, Exit, or Restart

相关 CWE