Test case 149061

Deprecated test case

This version contains mistakes, making it deprecated. Deprecated test cases should not be used for new work. However, They remain in the SARD as a reference to redo previous work. The latest version of this test case is available here.

Old Test Case ID: 1559
Type: source code
Pairs: 149062-v1.0.0
State: bad
Author: Fortify Software
Status: deprecated
Language: C
Submission Date: 22 Jun 2006

Description

Syslog is called with a user supplied format string. An attempt was made to preformat the buffer but the vulnerability remains.

Flaws

CWE-134 Use of Externally-Controlled Format String

Test Suites

ABM 1.0.1
C Test Suite for Source Code Analyzer v2 - Vulnerable

Have any comments on this test case? Please, send us an email.