Package illustrating a test case

Test case 149054

Type: source code
Pairs: 149053-v2.0.0
State: good
Author: PLOVER, Alexander Hoole, Aurelien Delaitre
Status: candidate
Language: C
Submission Date: 23 Mar 2015

Description

A system() is called with user-provided data but the data is strictly scrutinized first.

Flaws

CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Test Suites

C Test Suite for Source Code Analyzer - Secure v2

Have any comments on this test case? Please, send us an email.