National Institute of Standards and Technology
Package illustrating a test case

Test case 243839

Description

CWE: 789 Uncontrolled Memory Allocation
BadSource: fscanf Read data from the console using fscanf()
GoodSource: Small number greater than zero
Sinks:
GoodSink: Allocate memory with malloc() and check the size of the memory to be allocated
BadSink : Allocate memory with malloc(), but incorrectly check the size of the memory to be allocated
Flow Variant: 52 Data flow: data passed as an argument from one function to another to another in three different source files

Flaws

Test Suites

Documentation

Have any comments on this test case? Please, send us an email.