National Institute of Standards and Technology
Package illustrating a test case

Test case 1492

Description

Defective string manipulation code. If the first argument exceeds 128 characters (including the null one) the program will write outside of the bounds of the fixed size array.
From "Secure Coding in C and C++" by Robert C. Seacord.
Page 32, Figure 2-8

Flaws

Have any comments on this test case? Please, send us an email.