Query module ArithmeticTainted

name
User-controlled data in arithmetic expression
description
Arithmetic operations on user-controlled data that is not validated can cause overflows.
kind
problem
problem.severity
warning
precision
low
id
cpp/tainted-arithmetic
tags
security external/cwe/cwe-190 external/cwe/cwe-191

Imports

Overflow
Security

Definitions related to security queries. These can be extended for specific code bases.

TaintTracking
cpp

Provides classes and predicates for working with C/C++/ObjC/ObjC++ code.

Predicates