CWE-681—Incorrect Conversion between Numeric Types

名称

Incorrect Conversion between Numeric Types

描述

When converting from one data type to another, such as long to integer, data can be omitted or translated in a way that produces unexpected values. If the resulting values are used in a sensitive context, then dangerous behaviors may occur.

常见后果

范围：

Other, Integrity

影响：

Unexpected State, Quality Degradation

注释：

The program could wind up using the wrong number and generate incorrect results. If the number is used to allocate resources or make a security decision, then this could introduce a vulnerability.

相关 CWE

• CWE-682Incorrect CalculationHigh
• CWE-704Incorrect Type Conversion or Cast