Synopsis

(Required) The validity of values passed to library functions shall be checked (>=0 case).

Enabled by default

Yes

Severity/Certainty

Medium/Medium

Full description

A parameter value (<0) might cause a domain or range error. This check is identical to MISRAC2012-Dir-4.11_b.

Coding standards

Code examples

The following code example fails the check and will give a warning:

#include <math.h>

void gez(double d1, double d2) {
  double e;
  e = sqrt(-2);    /* const not in range */
  e = sqrt(d1);   /* var not checked */
  if(d1 >= 0) {
  } else {
    e = sqrt(d1); /* checked but in wrong branch */
  }
  if(d1 >= 0) {
    d1 = d2;
    e = sqrt(d1);/* checked but updated */
  }
}

The following code example passes the check and will not give a warning about this issue:

#include<math.h>

void gez(double d) {
  double e;
  if(d >= 0) {
    e = sqrt(d); /* checked before use */
  }
  if(0 <= d) {
    e = sqrt(d); /* checked before use */
  }
  if(d < 0) {
  } else {
    e = sqrt(d); /* checked before use */
  }
  if(0 > d) {
  } else {
    e = sqrt(d); /* checked before use */
  }
  e = sqrt(1.0); /* constant > 0 */
}