The STRONG.TYPE family of checkers detects situations in which programmer-enforced strong typing (type-defined abstract types) is broken or ignored, allowing the underlying ANSI type semantics to dominate.

The STRONG.TYPE.JOIN.CMP checker looks for an instance in which two different strong type values are compared using the >, ≥, <, or ≤ operator.

Vulnerability and risk

A compiler following the ANSI standard won't report a warning for this sort of issue, as it checks only the underlying types, not the surface, or programmer-defined, types. As a result, it's possible that a logic error can occur.

Vulnerable code example

1 typedef int Count;
2 typedef int Weight;
3
4 int main() {
5   Weight w;
6   Count c;
7   if (w >= c) ;
8   return 0;
9 }

Klocwork flags line 7, indicating that values of different strong types, Count and Weight, are compared with the >= operator.

STRONG.TYPE.JOIN.CMP

Comparison of different strong types

Vulnerability and risk

Vulnerable code example

Related checkers