CWE: 122 Heap Based Buffer Overflow BadSource: Allocate using new[] and set data pointer to a small buffer GoodSource: Allocate using new[] and set data pointer to a large buffer Sink: cat BadSink : Copy string to data using strcat Flow Variant: 13 Control flow: if(global_const_five==5) and...

CWE: 122 Heap Based Buffer Overflow BadSource: Allocate using new[] and set data pointer to a small buffer GoodSource: Allocate using new[] and set data pointer to a large buffer Sink: cat BadSink : Copy string to data using strcat Flow Variant: 12 Control flow: if(global_returns_t_or_f())

CWE: 122 Heap Based Buffer Overflow BadSource: Allocate using new[] and set data pointer to a small buffer GoodSource: Allocate using new[] and set data pointer to a large buffer Sink: cat BadSink : Copy string to data using strcat Flow Variant: 11 Control flow: if(global_returns_t()) and i...

CWE: 122 Heap Based Buffer Overflow BadSource: Allocate using new[] and set data pointer to a small buffer GoodSource: Allocate using new[] and set data pointer to a large buffer Sink: cat BadSink : Copy string to data using strcat Flow Variant: 10 Control flow: if(global_t) and if(global_f)

CWE: 122 Heap Based Buffer Overflow BadSource: Allocate using new[] and set data pointer to a small buffer GoodSource: Allocate using new[] and set data pointer to a large buffer Sink: cat BadSink : Copy string to data using strcat Flow Variant: 09 Control flow: if(global_const_t) and if(gl...

CWE: 122 Heap Based Buffer Overflow BadSource: Allocate using new[] and set data pointer to a small buffer GoodSource: Allocate using new[] and set data pointer to a large buffer Sink: cat BadSink : Copy string to data using strcat Flow Variant: 08 Control flow: if(static_returns_t()) and i...

CWE: 122 Heap Based Buffer Overflow BadSource: Allocate using new[] and set data pointer to a small buffer GoodSource: Allocate using new[] and set data pointer to a large buffer Sink: cat BadSink : Copy string to data using strcat Flow Variant: 07 Control flow: if(static_five==5) and if(st...

CWE: 122 Heap Based Buffer Overflow BadSource: Allocate using new[] and set data pointer to a small buffer GoodSource: Allocate using new[] and set data pointer to a large buffer Sink: cat BadSink : Copy string to data using strcat Flow Variant: 06 Control flow: if(static_const_five==5) and...

CWE: 122 Heap Based Buffer Overflow BadSource: Allocate using new[] and set data pointer to a small buffer GoodSource: Allocate using new[] and set data pointer to a large buffer Sink: cat BadSink : Copy string to data using strcat Flow Variant: 05 Control flow: if(static_t) and if(static_f)

CWE: 122 Heap Based Buffer Overflow BadSource: Allocate using new[] and set data pointer to a small buffer GoodSource: Allocate using new[] and set data pointer to a large buffer Sink: cat BadSink : Copy string to data using strcat Flow Variant: 04 Control flow: if(static_const_t) and if(st...

CWE: 122 Heap Based Buffer Overflow BadSource: Allocate using new[] and set data pointer to a small buffer GoodSource: Allocate using new[] and set data pointer to a large buffer Sink: cat BadSink : Copy string to data using strcat Flow Variant: 03 Control flow: if(5==5) and if(5!=5)

CWE: 122 Heap Based Buffer Overflow BadSource: Allocate using new[] and set data pointer to a small buffer GoodSource: Allocate using new[] and set data pointer to a large buffer Sink: cat BadSink : Copy string to data using strcat Flow Variant: 02 Control flow: if(1) and if(0)

CWE: 122 Heap Based Buffer Overflow BadSource: Allocate using new[] and set data pointer to a small buffer GoodSource: Allocate using new[] and set data pointer to a large buffer Sink: cat BadSink : Copy string to data using strcat Flow Variant: 01 Baseline

test submit.php 4

This test case shows the debugging code is removed from the program. Please refer to test cases 2196

This test case shows debugging code is left in the program

This test case shows index variable of a loop is initialized before use.

Variable is initialized before use.

Index variable of a loop is initialized before use.

Index variable of a loop is initialized before use.

Index variable in a loop is not initialized, but used.

Integer variable is not initialized before its use.

Test tool ability to identify potential problem of the use of static internal buff

Attempt to call function of deleted object.

Memory allocated with new() function call is not freed with delete() call, nor is its pointer returned by the funcation.