1.4.47. Migration to 7.3.5¶
1.4.47.1. Overflow checks¶
Stylechecks targeting integer overflow/underflow have been improved to better distinguish signed and unsigned cases. Findings for unsigned cases now use different message keys and message texts. This may influence your code annotations if they were tailored to precise message keys or message texts, and it may result in additional findings for source lines which have both an unsigned and signed integer overflow/underflow. Additionally, CertC-INT31 and CWE-191/2 were fixed to filter by a cast’s target type instead of the source type, resulting in a change of cast-related findings. SecureCoding-5.30 was fixed to apply only to the signed cases, resulting in a removal of unsigned cases which are not in the scope of this rule.