![]() |
Safe Numerics |
It's way too easy to overlook the checking of parameters received from outside the current program.
#include <stdexcept> #include <sstream> #include <iostream> #include "../include/safe_integer.hpp" int main(int argc, const char * argv[]){ // problem: checking of externally produced value can be overlooked std::cout << "example 6: "; std::cout << "checking of externally produced value can be overlooked" << std::endl; std::cout << "Not using safe numerics" << std::endl; std::istringstream is("12317289372189 1231287389217389217893"); try{ int x, y; is >> x >> y; // get integer values from the user std::cout << x << ' ' << y << std::endl; std::cout << "error NOT detected!" << std::endl; } catch(std::exception){ std::cout << "error detected!" << std::endl; } // solution: asign externally retrieved values to safe equivalents std::cout << "Using safe numerics" << std::endl; { using namespace boost::numeric; safe<int> x, y; is.seekg(0); try{ is >> x >> y; // get integer values from the user std::cout << x << ' ' << y << std::endl; std::cout << "error NOT detected!" << std::endl; } catch(std::exception & e){ std::cout << e.what() << std::endl; std::cout << "error detected!" << std::endl; } } return 0; }
Without safe integer, one will have to insert new code every time an integer variable is retrieved. This is a tedious and error prone procedure. Here we have used program input. But in fact this problem can occur with any externally produced input.