This test shows a null pointer is not dereferenced, in a local control flow.

This test case shows an effort is made to avoid OS command injection problem.

This test case show there is no double free weakness.

This test case shows a null pointer is dereferenced.

Pointer is checked before use

The test case shows a use of a allocated memory after freed.

An example to prevent heap overflow.

The test cases implements CVE-2002-1869: Don\'t check if you can write a log file allow attackers to avoid logging.

The test case exposes an OS Command Injection in scope complexity.

The test case exposes an OS Command Injection weakness in a loop.

The test case exposes an OS Command Injection weakness in a local control flow.

This test case is a \"fix\" to an exposed Heap Overflow with an array index complexity.

This is a \"fix\" of a heap overflow.

This test case shows a Heap Overflow

This test case exposes a Heap Overflow with an array index complexity.

This test case shows a hard coded password in a for loop structure.

This test case shows no hard-coded password in a local control flow.

The test case exposes a password which is not hard-coded in the source code.

The test cases shows hard-coded passwords are not used; these passwords are in a array

Index variable of a loop is initialized before use.

Index variable of a loop is initialized before use.

This code demos the Stored XSS (or Presistent) ==> "Loop Good Case". The servlet retrieves the records from database and reflects it back into the HTTP response after performing the validate, filter, escape and encode of that retrieved data.

This code demos the Stored XSS (or Presistent) ==> "Container Good Case". The servlet retrieves the records from database and reflects it back into the HTTP response after performing the validate, filter, escape and encode of that retrieved data.

This code demos the Stored XSS (or Presistent) ==> "Basic Good Case". The servlet retrieves the records from database and reflects it back into the HTTP response after performing the validate, filter, escape and encode of that retrieved data.

Test tool ability to identify potential problem of the use of static internal buffer.