Test case 150798

Description

This test case converts a user string to a short, and then converts that short to an unsigned int. If the short is negative, this will result in unexpected sign extension. The unsigned int value is used to determine how much data to read from a file, resulting in massive buffer overwrite if the file is large and the original input was negative.
Metadata
- Base program: Subversion
- Source Taint: SOCKET
- Data Type: UNION
- Data Flow: ADDRESS_AS_NONLINEAR_EXPRESSION
- Control Flow: INTERPROCEDURAL_10