This weakness takes a string in the form: ' ' where qsize is the size of the array to sort (used to delay execution) and data is a string that is used for processing. The contents of this string are unimportant. Two threads are created, one of which fails to check for a mutex lock leading to a null pointer dereference. In order to hit the weakness qsize >= 5000000, benign values should use qsize <= 50.
- Base program: Apache Jena
- Source Taint: FILE_CONTENTS
- Data Type: ARRAY
- Data Flow: JAVA_GENERICS
- Control Flow: INTERPROCEDURAL_10
Have any comments on this test case? Please, send us an email.