Test case 81919

Deprecated test case

This version contains mistakes, making it deprecated. Deprecated test cases should not be used for new work. However, They remain in the SARD as a reference to redo previous work. The latest version of this test case is available here.

Type: source code
State: mixed
Author: NSA/Center for Assured Software
Status: deprecated
Language: C
Submission Date: 20 May 2013

Description

CWE: 134 Uncontrolled Format String
BadSource: listen_socket Read data using a listen socket (server side)
GoodSource: Copy a fixed string into data
Sinks: vprintf
GoodSink: vwprintf with a format string
BadSink : vwprintf without a format string
Flow Variant: 65 Data/control flow: data passed as an argument from one function to a function in a different source file called via a function pointer

Flaws

CWE-134 Use of Externally-Controlled Format String

Test Suites

Juliet C/C++ 1.3 with extra support
Juliet C/C++ 1.2
Juliet C/C++ 1.2 with extra support
Juliet C/C++ 1.3
Juliet C/C++ 1.3.1 with extra support

Documentation

Release Log for Juliet 1.3
Juliet v1.2 for C and C++ cases.pdf
Juliet 1.3 Test Suite: Changes From 1.2

Have any comments on this test case? Please, send us an email.