National Institute of Standards and Technology
Package illustrating a test case

Test case 98703

Description

CWE: 400 Resource Exhaustion
BadSource: fgets Read data from the console using fgets()
GoodSource: Assign count to be a relatively small number
Sinks: fwrite
GoodSink: Write to a file count number of times, but first validate count
BadSink : Write to a file count number of times
Flow Variant: 52 Data flow: data passed as an argument from one function to another to another in three different source files

Flaws

Test Suites

Documentation

Have any comments on this test case? Please, send us an email.