# Integer Overflow or Wraparound (CWE-190)

The product performs a calculation that can produce an integer overflow or wraparound, when the logic assumes that the resulting value will always be larger than the original value.

**Stack:** Python

- Prevalence: Mittel 3 Sprachen abgedeckt
- Impact: Mittel Review empfohlen
- Prevention: Dokumentiert 3 Fix-Beispiele

**OWASP:** Security Misconfiguration (A05:2021-Security Misconfiguration) - #5

## Description

An integer overflow occurs when an arithmetic operation attempts to create a numeric value that is outside of the range that can be represented with a given number of bits. This can lead to buffer overflows, incorrect financial calculations, or security bypasses.

## Prevention

Präventionsstrategien für Integer Overflow basierend auf 1 Shoulder-Erkennungsregeln.

### Python

Validate numeric bounds before arithmetic operations on user input

## Warning Signs

- [LOW] potential integer overflow in numeric operations

## Consequences

- DoS
- Nicht autorisierten Code ausführen
- Anwendungsdaten ändern

## Mitigations

- Verwende Sprachen oder Bibliotheken, die Integer-Überläufe prüfen
- Stelle sicher, dass Eingaben innerhalb der erwarteten Bereiche liegen
- Verwende sichere Arithmetikfunktionen, die auf Überlauf prüfen

## Detection

- Total rules: 3
- Languages: go, javascript, typescript, python

## Rules by Language

### Python (1 rules)

- **Integer Overflow / Large Number Handling** [LOW]: Detects potential integer overflow in numeric operations.
  - Remediation: Validate numeric bounds before arithmetic operations.

```python
from flask import request, jsonify

@app.route('/calculate')
def calculate():
    count = int(request.args.get('count', 0))
    if count < 0 or count > 10000:
        return jsonify({'error': 'Invalid count'}), 400

    result = count * unit_price
    return jsonify({'total': result})
```

Learn more: https://shoulder.dev/learn/python/cwe-190/integer-overflow