Package illustrating a test case

Test case 149063

Type: source code
Pairs: 149064-v2.0.0
State: bad
Author: Fortify Software, Alexander Hoole, Aurelien Delaitre
Status: candidate
Language: C
Submission Date: 23 Mar 2015

Description

A printf is called with a user format string. This is a defect.

Flaws

CWE-134 Use of Externally-Controlled Format String

Test Suites

C Test Suite for Source Code Analyzer v2 - Vulnerable

Have any comments on this test case? Please, send us an email.