This website is a repository of test cases for software assurance tools. http://samate.nist.gov/SRD http://samate.nist.gov/SRD/images/samate/logo-light.png http://samate.nist.gov/SRD By Paul E. Black, New test case: Proper bounds checking for strcat()[br][br]Still theoretically vulnerable to integer overflow.[br][br]This replaces cases 1322 and 1323. This is the fixed version of cases 2081 and 2082. http://samate.nist.gov/SRD/view_testcase.php?tID=2083&expandComments=1 2009-04-03 By Paul E. Black, New test case: Off-by-one error on bounds checking for strcat(). PLOVER: NUM.OBO, BUFF.OVER This replaces case 1320 http://samate.nist.gov/SRD/view_testcase.php?tID=2082&expandComments=1 2009-04-03 By Paul E. Black, New test case: No bounds checking on buffer during strcat(). PLOVER: BUFF.OVER This replaces case 1319 http://samate.nist.gov/SRD/view_testcase.php?tID=2081&expandComments=1 2009-04-03 By Paul E. Black, Comment: Syntax error: closing paren replaced by special character. Replaced by case 2078 http://samate.nist.gov/SRD/view_testcase.php?tID=1456&expandComments=1 2009-04-03 By Paul E. Black, Comment: Line 13 concatenates to the environment store, through str, instead of to the local buffer, buf. This case was replaced by case 2083. http://samate.nist.gov/SRD/view_testcase.php?tID=1323&expandComments=1 2009-04-03 By Paul E. Black, Comment: Line 13 concatenates to the environment store, through str, instead of to the local buffer, buf. Also test at line 12 should be MAXSIZE, not MAXSIZE + 1. This case was replaced by case 2083. http://samate.nist.gov/SRD/view_testcase.php?tID=1322&expandComments=1 2009-04-03 By Paul E. Black, Comment: Line 22 concatenates to the environment store, through str, instead of to the local buffer, buf. This case was replaced by case 2082 http://samate.nist.gov/SRD/view_testcase.php?tID=1320&expandComments=1 2009-04-03 By Paul E. Black, Comment: Line 20 concatenates to the environment store, through str, instead of to the local buffer, buf. This case was replaced by case 2081 http://samate.nist.gov/SRD/view_testcase.php?tID=1319&expandComments=1 2009-04-03 By Michael Koo, Comment: The weakness of this test case should be CWE-120 (Classic Buffer Overflow). http://samate.nist.gov/SRD/view_testcase.php?tID=1493&expandComments=1 2009-01-21 By Michael Koo, Comment: CWE has deprecated "Miscalculated Null Termination"; due to it was a duplicate of "Improper Null Termination". Accordingly, the original weakness name of this test case is changed to new name. http://samate.nist.gov/SRD/view_testcase.php?tID=1595&expandComments=1 2009-01-02 By Michael Koo, Comment: CWE has deprecated ‘Miscalculated Null Termination’; due to it was a duplicate of ’Improper Null Termination’. Accordingly, the original weakness name of this test case is changed to new name. http://samate.nist.gov/SRD/view_testcase.php?tID=1594&expandComments=1 2009-01-02 By Michael Koo, Comment: CWE has deprecated ‘Miscalculated Null Termination’; due to it was a duplicate of ’Improper Null Termination’. Accordingly, the original weakness name of this test case is changed to new name. http://samate.nist.gov/SRD/view_testcase.php?tID=1593&expandComments=1 2009-01-02 By Michael Koo, Comment: CWE has deprecated “Miscalculated Null Termination”; due to it was a duplicate of “Improper Null Termination”. Accordingly, the original weakness name of this test case is changed to new name. http://samate.nist.gov/SRD/view_testcase.php?tID=1592&expandComments=1 2009-01-02 By Michael Koo, Comment: CWE has deprecated “Miscalculated Null Termination”; due to it was a duplicate of “Improper Null Termination”. Accordingly, the original weakness name of this test case is changed to new name. http://samate.nist.gov/SRD/view_testcase.php?tID=1493&expandComments=1 2009-01-02 By Michael Koo, Comment: CWE has deprecated “Miscalculated Null Termination”; due to it was a duplicate of “Improper Null Termination”. Accordingly, the original weakness name of this test case is changed to new name. http://samate.nist.gov/SRD/view_testcase.php?tID=1492&expandComments=1 2009-01-02