Displaying test cases 101 - 125 of 637 in total
-
This test case implements an incorrectly checked write into a buffer that is contained within a heap allocated struct. The buffer is declared as a struct member with a fixed size. Untrusted input is not properly sanitized or restricted before being copied into the buffer, from the last character ...
-
This test case creates a struct that has a message_type field and a message_data field. The message_type field should be 1 if the message_data field contains a char*, and 0 if it contains an int. The message_data field is set to be the taint source, and the message_type field is set to 1. If the ...
-
This test case implements a buffer that is used after it has been free()'d and it's memory allocated to another task. The test case takes a string as input and copies this string into an internal buffer allocated on the heap. For certain inputs (any string starting with an ASCII character with va...
-
This test case creates a struct on the stack that contains a function pointer and a char*. It examines the length of the taint source. If the length is not equal to 10, it sets the function pointer and char* within the struct to benign values. If the length is equal to 10, it does not set the fun...
-
This test case allocates a struct on the stack, with a 20-character buffer and a pointer following that buffer. It checks if the taint source is less than 20 characters. If so, it sets the 20-charcter buffer to all 0's then sets the pointer following the buffer to point to the beginning of the bu...
-
This test case implements an improper array index validation that can cause a function pointer to get overwritten leading to a segfault. The test case takes untrusted user input and uses it to calculate array indexes which then get modified. If the untrusted input contains certain ASCII character...
-
Metadata - Base program: FFmpeg - Source Taint: SHARED_MEMORY - Data Type: UNION - Data Flow: ADDRESS_AS_FUNCTION_RETURN_VALUE - Control Flow: UNCONDITIONAL_JUMP
-
Metadata - Base program: FFmpeg - Source Taint: ENVIRONMENT_VARIABLE - Data Type: UNION - Data Flow: BUFFER_ADDRESS_POINTER - Control Flow: INDIRECTLY_RECURSIVE
-
Metadata - Base program: FFmpeg - Source Taint: SHARED_MEMORY - Data Type: SIMPLE - Data Flow: ADDRESS_AS_CONSTANT - Control Flow: INFINITE_LOOP
-
Metadata - Base program: FFmpeg - Source Taint: SHARED_MEMORY - Data Type: TYPEDEF - Data Flow: ADDRESS_AS_FUNCTION_RETURN_VALUE - Control Flow: INTERPROCEDURAL_10
-
Metadata - Base program: FFmpeg - Source Taint: SHARED_MEMORY - Data Type: STRUCT - Data Flow: BUFFER_ADDRESS_ARRAY_INDEX - Control Flow: SET_JUMP_LONG_JUMP
-
Metadata - Base program: FFmpeg - Source Taint: SOCKET - Data Type: TYPEDEF - Data Flow: ADDRESS_AS_VARIABLE - Control Flow: INFINITE_LOOP
-
Metadata - Base program: FFmpeg - Source Taint: SOCKET - Data Type: UNION - Data Flow: ADDRESS_AS_FUNCTION_RETURN_VALUE - Control Flow: POINTER_TO_FUNCTION
-
Metadata - Base program: FFmpeg - Source Taint: SHARED_MEMORY - Data Type: VOID_POINTER - Data Flow: ADDRESS_AS_CONSTANT - Control Flow: POINTER_TO_FUNCTION
-
Metadata - Base program: FFmpeg - Source Taint: ENVIRONMENT_VARIABLE - Data Type: HEAP_POINTER - Data Flow: BUFFER_ADDRESS_POINTER - Control Flow: INTERPROCEDURAL_10
-
Metadata - Base program: FFmpeg - Source Taint: FILE_CONTENTS - Data Type: HEAP_POINTER - Data Flow: ADDRESS_AS_CONSTANT - Control Flow: CALLBACK
-
Metadata - Base program: FFmpeg - Source Taint: ENVIRONMENT_VARIABLE - Data Type: HEAP_POINTER - Data Flow: ADDRESS_ALIAS_10 - Control Flow: SEQUENCE
-
Metadata - Base program: FFmpeg - Source Taint: SOCKET - Data Type: UNION - Data Flow: BUFFER_ADDRESS_POINTER - Control Flow: INFINITE_LOOP
-
Metadata - Base program: FFmpeg - Source Taint: SHARED_MEMORY - Data Type: STRUCT - Data Flow: ADDRESS_AS_NONLINEAR_EXPRESSION - Control Flow: INTERPROCEDURAL_1
-
Metadata - Base program: FFmpeg - Source Taint: ENVIRONMENT_VARIABLE - Data Type: TYPEDEF - Data Flow: ADDRESS_AS_VARIABLE - Control Flow: SET_JUMP_LONG_JUMP
-
Metadata - Base program: FFmpeg - Source Taint: ENVIRONMENT_VARIABLE - Data Type: HEAP_POINTER - Data Flow: BASIC - Control Flow: RECURSIVE
-
Metadata - Base program: FFmpeg - Source Taint: ENVIRONMENT_VARIABLE - Data Type: TYPEDEF - Data Flow: ADDRESS_AS_CONSTANT - Control Flow: SEQUENCE
-
Metadata - Base program: FFmpeg - Source Taint: SHARED_MEMORY - Data Type: TYPEDEF - Data Flow: ADDRESS_AS_LINEAR_EXPRESSION - Control Flow: INTERPROCEDURAL_1
-
Metadata - Base program: FFmpeg - Source Taint: FILE_CONTENTS - Data Type: TYPEDEF - Data Flow: BASIC - Control Flow: INTERPROCEDURAL_50
-
Metadata - Base program: FFmpeg - Source Taint: SHARED_MEMORY - Data Type: VOID_POINTER - Data Flow: ADDRESS_AS_VARIABLE - Control Flow: INDIRECTLY_RECURSIVE