Test case 156189

Type: source code
State: bad
Author: IARPA STONESOUP Test and Evaluation team
Status: candidate
Language: Java
Application: cpe:2.3:a:apache:jena:2.11.0:-:*:*:*:*:*:*
Submission Date: 06 Oct 2015

Description

This test takes in data from an argument, that is intended to contain parameters for an 'ls' command. The test does not perform checks for special characters, however, and it is possible to include other, unexpected commands as part of the ls parameter set.

Metadata
-Base program: Apache Jena
- Source Taint: SOCKET
- Data Type: array
- Data Flow: var_arg_list
- Control Flow: indirectly_recursive