National Institute of Standards and Technology
Package illustrating a test case

Test case 117589

Description

CWE: 789 Uncontrolled Memory Allocation
BadSource: fscanf Read data from the console using fscanf()
GoodSource: Small number greater than zero
Sinks:
GoodSink: Allocate memory with new [] and check the size of the memory to be allocated
BadSink : Allocate memory with new [], but incorrectly check the size of the memory to be allocated
Flow Variant: 52 Data flow: data passed as an argument from one function to another to another in three different source files

Flaws

Test Suites

Documentation

Have any comments on this test case? Please, send us an email.