Package illustrating a test case

Test case 2110

Type: source code
State: good
Author: Charline Cleraux
Status: accepted
Language: Java
Submission Date: 15 Oct 2009

Description

The code tries to execute a system command, read from the input buffer. Validation is done by ProcessBuilder before execution.

Flaws

CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Test Suites

Java Test Suite for Source Code Analyzer - false positive

Have any comments on this test case? Please, send us an email.