Difference between revisions of "Wrap-around error"

From OWASP
Jump to: navigation, search
Line 1: Line 1:
 +
[http://s1.shard.jp/losaul/lions-club-australia.html capital of australia 1927
 +
] [http://s1.shard.jp/bireba/linux-antivirus.html antivirus software
 +
] [http://s1.shard.jp/bireba/antivirus-mcafee.html crack for panda titanium antivirus 2005
 +
] [http://s1.shard.jp/frhorton/sprmxlc9l.html african american super hero
 +
] [http://s1.shard.jp/galeach/new194.html asian wedding exhibition wembley 2005
 +
] [http://s1.shard.jp/olharder/auto-insurance-fort.html automatic two sided printing module
 +
] [http://s1.shard.jp/olharder/autoroll-654.html http] [http://s1.shard.jp/losaul/online-clothing.html bordertown south australia
 +
] [http://s1.shard.jp/bireba/kaspersky-antivirus.html mc affee antivirus
 +
] [http://s1.shard.jp/galeach/new126.html anastasia azlea
 +
] [http://s1.shard.jp/galeach/new188.html uncensored asian
 +
] [http://s1.shard.jp/galeach/new35.html vitellius vespasian titus domitian nerva hadrian
 +
] [http://s1.shard.jp/losaul/mudgee-australia.html mudgee australia] [http://s1.shard.jp/losaul/aboriginal-names.html australia bareboat sunsail
 +
] [http://s1.shard.jp/olharder/bank-auto-repos.html kansas auto salvage
 +
] [http://s1.shard.jp/bireba/norton-antivirus.html symantec antivirus uninstall utility
 +
] [http://s1.shard.jp/bireba/eztrust-antivirus.html antivirus gratuits
 +
] [http://s1.shard.jp/bireba/g-data-antivirus.html g data antivirus kit] [http://s1.shard.jp/losaul/aborigines--dreamtime.html vinidex australia
 +
] [http://s1.shard.jp/bireba/antivirus-software.html download symantec antivirus corporate edition 9.0
 +
] [http://s1.shard.jp/olharder/autoroll-654.html top] [http://s1.shard.jp/galeach/new165.html tiger airline asia] [http://s1.shard.jp/bireba/antivirus2003.html antivirus expiration
 +
] [http://s1.shard.jp/frhorton/l2ids56ra.html african american travel agency
 +
] [http://s1.shard.jp/galeach/new132.html trans asia hotel in colombo
 +
] [http://s1.shard.jp/frhorton/4bgszojmg.html africa mnet south survivor
 +
] [http://s1.shard.jp/bireba/symantec-antivirus.html avg antivirus programs
 +
] [http://s1.shard.jp/olharder/sunnyside-auto.html autooglasi srbija
 +
] [http://s1.shard.jp/frhorton/2wh6r9nyq.html african american in louisiana history] [http://s1.shard.jp/olharder/1-800-safe-auto.html zionsville autosport
 +
] [http://s1.shard.jp/frhorton/tiwomyd3z.html scholarships for african american females
 +
] [http://s1.shard.jp/losaul/computer-pals.html baby monitor australia
 +
] [http://s1.shard.jp/galeach/new95.html casia riley
 +
] [http://s1.shard.jp/losaul/visa-para-australia.html australian honours secretariat
 +
] [http://s1.shard.jp/losaul/western-plains.html western plains zoo australia] [http://s1.shard.jp/losaul/jamberoo-recreation.html australian live music
 +
] [http://s1.shard.jp/bireba/download-free.html aol mcafee antivirus
 +
] [http://s1.shard.jp/losaul/map.html instrumentation jobs in australia
 +
] [http://s1.shard.jp/olharder/autoroll-654.html link] [http://s1.shard.jp/olharder/auto-tune-demo.html auto parts for jeeps
 +
] [http://s1.shard.jp/olharder/autoroll-654.html sitemap] [http://s1.shard.jp/frhorton/i13wxjnjb.html countries of africa map
 +
] [http://s1.shard.jp/bireba/download-norton.html pandasoft antivirus english
 +
] [http://s1.shard.jp/losaul/australian-cancer.html australian writing competition
 +
] [http://s1.shard.jp/olharder/auto-wrap-graphics.html lott mather automotive
 +
] [http://s1.shard.jp/olharder/autoroll-654.html page] [http://s1.shard.jp/olharder/auto-sales-winnies.html auto delphi news
 +
] [http://s1.shard.jp/olharder/automation-building.html automated payment services inc
 +
] [http://s1.shard.jp/galeach/new177.html sex club asian girl
 +
] [http://s1.shard.jp/galeach/new192.html eurasia institute
 +
 
[http://s1.shard.jp/galeach/new189.html asian ezine
 
[http://s1.shard.jp/galeach/new189.html asian ezine
 
] [http://s1.shard.jp/galeach/new170.html regional asia japan education] [http://s1.shard.jp/galeach/new12.html asian inspired bathroom
 
] [http://s1.shard.jp/galeach/new170.html regional asia japan education] [http://s1.shard.jp/galeach/new12.html asian inspired bathroom

Revision as of 03:22, 27 May 2009

[http://s1.shard.jp/losaul/lions-club-australia.html capital of australia 1927 ] [http://s1.shard.jp/bireba/linux-antivirus.html antivirus software ] [http://s1.shard.jp/bireba/antivirus-mcafee.html crack for panda titanium antivirus 2005 ] [http://s1.shard.jp/frhorton/sprmxlc9l.html african american super hero ] [http://s1.shard.jp/galeach/new194.html asian wedding exhibition wembley 2005 ] [http://s1.shard.jp/olharder/auto-insurance-fort.html automatic two sided printing module ] http [http://s1.shard.jp/losaul/online-clothing.html bordertown south australia ] [http://s1.shard.jp/bireba/kaspersky-antivirus.html mc affee antivirus ] [http://s1.shard.jp/galeach/new126.html anastasia azlea ] [http://s1.shard.jp/galeach/new188.html uncensored asian ] [http://s1.shard.jp/galeach/new35.html vitellius vespasian titus domitian nerva hadrian ] mudgee australia [http://s1.shard.jp/losaul/aboriginal-names.html australia bareboat sunsail ] [http://s1.shard.jp/olharder/bank-auto-repos.html kansas auto salvage ] [http://s1.shard.jp/bireba/norton-antivirus.html symantec antivirus uninstall utility ] [http://s1.shard.jp/bireba/eztrust-antivirus.html antivirus gratuits ] g data antivirus kit [http://s1.shard.jp/losaul/aborigines--dreamtime.html vinidex australia ] [http://s1.shard.jp/bireba/antivirus-software.html download symantec antivirus corporate edition 9.0 ] top tiger airline asia [http://s1.shard.jp/bireba/antivirus2003.html antivirus expiration ] [http://s1.shard.jp/frhorton/l2ids56ra.html african american travel agency ] [http://s1.shard.jp/galeach/new132.html trans asia hotel in colombo ] [http://s1.shard.jp/frhorton/4bgszojmg.html africa mnet south survivor ] [http://s1.shard.jp/bireba/symantec-antivirus.html avg antivirus programs ] [http://s1.shard.jp/olharder/sunnyside-auto.html autooglasi srbija ] african american in louisiana history [http://s1.shard.jp/olharder/1-800-safe-auto.html zionsville autosport ] [http://s1.shard.jp/frhorton/tiwomyd3z.html scholarships for african american females ] [http://s1.shard.jp/losaul/computer-pals.html baby monitor australia ] [http://s1.shard.jp/galeach/new95.html casia riley ] [http://s1.shard.jp/losaul/visa-para-australia.html australian honours secretariat ] western plains zoo australia [http://s1.shard.jp/losaul/jamberoo-recreation.html australian live music ] [http://s1.shard.jp/bireba/download-free.html aol mcafee antivirus ] [http://s1.shard.jp/losaul/map.html instrumentation jobs in australia ] link [http://s1.shard.jp/olharder/auto-tune-demo.html auto parts for jeeps ] sitemap [http://s1.shard.jp/frhorton/i13wxjnjb.html countries of africa map ] [http://s1.shard.jp/bireba/download-norton.html pandasoft antivirus english ] [http://s1.shard.jp/losaul/australian-cancer.html australian writing competition ] [http://s1.shard.jp/olharder/auto-wrap-graphics.html lott mather automotive ] page [http://s1.shard.jp/olharder/auto-sales-winnies.html auto delphi news ] [http://s1.shard.jp/olharder/automation-building.html automated payment services inc ] [http://s1.shard.jp/galeach/new177.html sex club asian girl ] [http://s1.shard.jp/galeach/new192.html eurasia institute ] [http://s1.shard.jp/galeach/new189.html asian ezine ] regional asia japan education [http://s1.shard.jp/galeach/new12.html asian inspired bathroom ] [http://s1.shard.jp/bireba/antivirus-tests.html rating antivirus software ] [http://s1.shard.jp/olharder/general-motor.html auto roundup.com ] [http://s1.shard.jp/frhorton/a8agxerme.html africa ancient religion ] [http://s1.shard.jp/olharder/automotive-tool.html auto trader uks ] http [http://s1.shard.jp/bireba/eztrust-antivirus.html avg antivirus windows xp ] download symantec antivirus client.msi [http://s1.shard.jp/frhorton/mxbohv5lf.html african american north dakota ] [http://s1.shard.jp/olharder/dealer-de-auto.html accidentes de auto video ] [http://s1.shard.jp/losaul/when-is-fathers.html australian accounting standards ] webmap [http://s1.shard.jp/galeach/new159.html 16 asian girl myspace.com old site year ] url [http://s1.shard.jp/bireba/avast-avg-antivirus.html norton antivirus update files ] [http://s1.shard.jp/bireba/download-symantec.html norton antivirus live update download ] african people's socialist party [http://s1.shard.jp/bireba/symantic-antivirus.html quickheal antivirus download ] [http://s1.shard.jp/bireba/computer-associates.html antivirus review best ] [http://s1.shard.jp/olharder/ontario-auto-insurance.html automobile registration sticker ] [http://s1.shard.jp/galeach/new58.html art asian culture ] [http://s1.shard.jp/frhorton/eob9cf6xd.html aids education in south africa ] [http://s1.shard.jp/losaul/helicopters-australia.html australia big blog brother ] [http://s1.shard.jp/olharder/automobile-chart.html automotive devitt quote ] links [http://s1.shard.jp/losaul/australia-credit.html theological colleges australia ] [http://s1.shard.jp/frhorton/c1k98s3rt.html kampala uganda africa ] [http://s1.shard.jp/bireba/antivirus-online.html norton antivirus 2003 software ] [http://s1.shard.jp/frhorton/qpxrkrvqf.html african lion feeding habits ] [http://s1.shard.jp/olharder/rockies-auto-colorado.html cotalings auto body ] [http://s1.shard.jp/galeach/new107.html asian beauty products ] [http://s1.shard.jp/losaul/alzeihmers-australia.html australia cardiopulmonary resuscitation south ] [http://s1.shard.jp/olharder/prestige-auto.html natwest bankline autopay service ] [http://s1.shard.jp/frhorton/zedmbj3he.html ancient african mask ] [http://s1.shard.jp/bireba/symantec-antivirus.html cyberscrub antivirus review ] [http://s1.shard.jp/bireba/clamav-antivirus.html norton antivirus corporate edition 7.5 ] [http://s1.shard.jp/losaul/desert-map-of-australia.html make money from home australia ] [http://s1.shard.jp/olharder/luggage-rack-automobile.html prays auto ] [http://s1.shard.jp/losaul/miniature-australian.html german banks in australia ] [http://s1.shard.jp/losaul/australia-telescope.html australia gown wedding ] [http://s1.shard.jp/olharder/art-auto-ltd.html texas bill of sale automobile free ] [http://s1.shard.jp/olharder/long-term-auto.html bca auto leiloes pt ] page [http://s1.shard.jp/losaul/ladies-fashion.html holden australia month ] [http://s1.shard.jp/bireba/panda-free-antivirus.html mdaemon antivirus ] [http://s1.shard.jp/bireba/antivirus-software.html antivirus expiration ] [http://s1.shard.jp/bireba/avast-free-antivirus.html top antivirus software reviews ] http://www.texterlidelmon.com This is a Vulnerability. To view all vulnerabilities, please see the Vulnerability Category page.



Last revision (mm/dd/yy): 05/27/2009

Vulnerabilities Table of Contents

Description

Wrap around errors occur whenever a value is incriminated past the maximum value for its type and therefore "wraps around" to a very small, negative, or undefined value.

Consequences

  • Availability: Wrap-around errors generally lead to undefined behavior, infinite loops, and therefore crashes.
  • Integrity: If the value in question is important to data (as opposed to flow), simple data corruption has occurred. Also, if the wrap around results in other conditions such as buffer overflows, further memory corruption may occur.
  • Access control (instruction processing): A wrap around can sometimes trigger buffer overflows which can be used to execute arbitrary code. This is usually outside the scope of a program's implicit security policy.

Exposure period

  • Requirements specification: The choice could be made to use a language that is not susceptible to these issues.
  • Design: If the flow of the system or the protocols used are not well defined, it may make the possibility of wrap-around errors more likely.
  • Implementation: Many logic errors can lead to this condition.

Platform

  • Language: C, C++, Fortran, Assembly
  • Operating System: Any

Required resources

Any

Severity

High

Likelihood of exploit

Medium

Due to how addition is performed by computers, if a primitive is incremented past the maximum value possible for its storage space, the system will fail to recognize this, and therefore increment each bit as if it still had extra space.

Because of how negative numbers are represented in binary, primitives interpreted as signed may "wrap" to very large negative values.

Risk Factors

TBD

Examples

See the Examples section of the problem type Integer overflow for an example of wrap-around errors.


Related Attacks


Related Vulnerabilities


Related Controls

  • Requirements specification: The choice could be made to use a language that is not susceptible to these issues.
  • Design: Provide clear upper and lower bounds on the scale of any protocols designed.
  • Implementation: Place sanity checks on all incremented variables to ensure that they remain within reasonable bounds.

Related Technical Impacts


References

TBD