The test case is a basic CGI source code which allows Cross-Site Scripting (XSS). The code has a Scope complexity.

The test case is a basic CGI source code which allows Cross-Site Scripting (XSS). The code has a Scope complexity.

user can input more then the max number of characters causing a stack overflow

user can input more then the max number of characters causing a stack overflow

created short is never deleted

created short is never deleted

created objects are never destroyed

created objects are never destroyed

The test case is a basic CGI source code which allows Cross-Site Scripting (XSS).

The test case is a basic CGI source code which allows Cross-Site Scripting (XSS).

creates a short that it does not delete

The test case shows a Heap Overflow by trying to insert out of the bounds of the buffer a character. The code has a Array Index complexity.

The test case shows a Heap Overflow by trying to insert out of the bounds of the buffer a character. The code has a Array Index complexity.

users cannot add the arguments -debug -root to take advantage of leftover debug code

The test case shows a Heap Overflow by trying to insert out of the bounds of the buffer a character. The code has a Array Address complexity.

The test case shows a Heap Overflow by trying to insert out of the bounds of the buffer a character. The code has a Array Address complexity.

creates a short that it does not delete

The test case shows a Heap Overflow by trying to insert out of the bounds of the buffer a character. The code has a Scope complexity.

The test case shows a Heap Overflow by trying to insert out of the bounds of the buffer a character. The code has a Scope complexity.

users can add the arguments -debug -root to take advantage of leftover debug code

The test case shows a Heap Overflow by trying to insert out of the bounds of the buffer a character \'a\'.

The test case shows a Heap Overflow by trying to insert out of the bounds of the buffer a character \'a\'.

Private array returned from a public method

Test tool ability to identify potential problem of the use of static internal buffer.

Test of tool ability to identify an unchecked error condition.