PRECISION.LOSS

Loss of precision

The PRECISION.LOSS checker finds instances in which an implicit cast to a smaller data type can cause a loss of precision in data.

Depending on the exact circumstances, this situation is potentially exploitable, for instance if it results in a buffer overflow.

If the loss of precision cast is intentional, the source of the cast should be masked with an appropriate bitmask. For example:

Copy

1
char c = (i & 0xFF);

Copy

1
2
3
4
  void foo(int i) {
      char c;
      c = i; 
  }

Klocwork flags line 3, in which there's an implicit cast to a smaller data type, char 'c'.

Application security training materials provided by Secure Code Warrior.