An integer overflow can lead to data corruption, unexpected behavior, infinite loops and system crashes. This creates a potential integer overflow if the value for the three monthly sales adds up to more than the maximum value for the short int primitive type. In C the short int primitive type has a maximum value of 32768. However, in this example the primitive type short int is used for both the monthly and the quarterly sales variables. QuarterRevenue = calculateRevenueForQuarter(quarterSold) Calculate the total revenue for the quarter Short quarterSold = JanSold + FebSold + MarSold Short MarSold = getMonthlySales(MAR) /* Get sales in March */ Short FebSold = getMonthlySales(FEB) /* Get sales in February */ Short JanSold = getMonthlySales(JAN) /* Get sales in January */ Variable for sales revenue for the quarter In addition, relationships such as PeerOf and CanAlsoBe are defined to show similar weaknesses that the user may want to explore. These relationships are defined as ChildOf, ParentOf, MemberOf and give insight to similar items that may exist at higher and lower levels of abstraction. This table shows the weaknesses and high level categories that are related to this weakness. Improper Restriction of Operations within the Bounds of a Memory Buffer

Class level weaknesses typically describe issues in terms of 1 or 2 of the following dimensions: behavior, property, and resource. More specific than a Pillar Weakness, but more general than a Base Weakness. Insufficient Precision or Accuracy of a Real NumberĬlass - a weakness that is described in a very abstract fashion, typically independent of any specific language or technology. Base level weaknesses typically describe issues in terms of 2 or 3 of the following dimensions: behavior, property, technology, language, and resource. That is still mostly independent of a resource or technology, but with sufficient details to provide specific methods for detection and prevention. A Pillar is different from a Category as a Pillar is still technically a type of weakness that describes a mistake, while a Category represents a common characteristic used to group related things. Pillar - a weakness that is the most abstract type of weakness and represents a theme for all class/base/variant weaknesses related to it.

Software wrapper defi