Amazon QDetector Library Sign in to Amazon Q

Amazon Q

Detector Library

C++ detectors (43/43)

Disabled HTML autoescape Weak pseudorandom number generation Missing Default in Switch Hardcoded credentials Unsafe File Extension Use Of Incorrect Operator Incorrect Order Of setuid and setgid Out Of Bounds Read Code Injection Out Of Bounds Write Thread safety violation Incorrect Pointer Subtraction Mismatched memory management routines.File System Access Insecure Buffer Access Incorrect Use of Sizeof Incorrect Pointer Scaling Loose File Permissions Sensitive information leak Missing Authorization Return Stack Address OS Command Injection Use After Free Incorrect Comparison Cross-Site Request Forgery (CSRF)off by one error Numeric Truncation Error Path traversal Insecure temporary file or directory Insecure Cryptography Insecure connection using unencrypted protocol Unchecked Null Dereference SQL injection Log injection Missing check on method output Improper Restriction on Memory Buffer Incorrect Conversion Of Numeric Types Multiple Locks Improper Input Validation Null Pointer Dereference Improper Certificate Validation Cross Site Scripting Improper Authentication

Incorrect Conversion Of Numeric Types Critical

Converting from one data type to another, such as long to integer, data can be omitted or translated in a way that produces unexpected values. If the resulting values are used in a sensitive context, then dangerous behaviors may occur.

Detector ID

cpp/incorrect-conversion-of-numeric-types@v1.0

Category

Common Weakness Enumeration (CWE)

Tags

-

Noncompliant example

1
2void incorrectConversionOfNumericTypesNoncompliant(int int_var) {
3    // Noncompliant: A primitive is cast to a primitive of a smaller size.
4    char char_var = int_var;
5}

Compliant example

1
2void incorrectConversionOfNumericTypesCompliant(int int_var) {
3    // Compliant: A primitive is cast to a primitive of a same size.
4    int char_var = int_var;
5}