This is the mail archive of the gcc@gcc.gnu.org mailing list for the GCC project.

Index Nav:	[Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav:	[Date Prev] [Date Next]	[Thread Prev] [Thread Next]
Other format:	[Raw text]

Re: Security vulernarability or security feature?

From: Paolo Bonzini <bonzini at gnu dot org>
To: gcc at gcc dot gnu dot org
Cc: Robert Dewar <dewar at adacore dot com>, Prateek Saxena <prateeksaxena at gmail dot com>, gcc at gnu dot org, cert at cert dot org
Date: Sun, 27 Apr 2008 18:56:01 +0200
Subject: Re: Security vulernarability or security feature?
References: <20080425085640.707e9a56@ihug.co.nz> <4810F65C.3090705@cert.org> <20080425092059.5442435c@ihug.co.nz> <4dd65b150804241609o4d98bf6dgdd01ad2660ef7051@mail.gmail.com> <ad2655cb0804270414x5ff59e1dm1a30a306fa342d61@mail.gmail.com> <4814716C.30409@adacore.com> <ad2655cb0804270600q6b81f3c1u1c4a7863fa013914@mail.gmail.com>

I think Java handles it OK for floats. I.e. Tests for positive
infinity and negative infinity etc.
I don't think Java handles it for integer maths.

Java integer math is mandated to have wrap-around semantics. So you can do something like

if ((b^c) > 0 && (a^c) < 0 && (a^b) < 0)
  overflow

Paolo

Follow-Ups:
- Re: Security vulernarability or security feature?
  - From: Robert Dewar

References:
- Security vulernarability or security feature?
  - From: Ralph Loader
- Re: Security vulernarability or security feature?
  - From: Robert C. Seacord
- Re: Security vulernarability or security feature?
  - From: Ralph Loader
- Re: Security vulernarability or security feature?
  - From: Prateek Saxena
- Re: Security vulernarability or security feature?
  - From: James Courtier-Dutton
- Re: Security vulernarability or security feature?
  - From: Robert Dewar
- Re: Security vulernarability or security feature?
  - From: James Courtier-Dutton

Index Nav:	[Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav:	[Date Prev] [Date Next]	[Thread Prev] [Thread Next]