Test of tool ability to identify a NULL pointer dereference.

The test case shows a Cross Site scripting weakness in a C/CGI application.

The use of a hard-coded password increases the possibility of password guessing tremendously. (from TCCLASP-5_5_9_10-C)

This test case exposes a Race Condition error at the line 47. Many processes can access the same file in different moment.

This test case exposes a Race Condition error at the line 47. Many processes can access the same file in different moment.

This test case exposes a Race Condition error at the line 26. Many processes can access the same file in different moment.[br] We can have something like that:[br] Process 1: Open File[br] Process 1: Close File[br] Process 2: Open File[br] Process 3: Open File[br] Process 2: Close File[br] Proces...

This test case exposes a Race Condition error at the line 26. Many processes can access the same file in different moment.[br] We can have something like that:[br] Process 1: Open File[br] Process 1: Close File[br] Process 2: Open File[br] Process 3: Open File[br] Process 2: Close File[br] Proces...

The SQL Injection is possible because the argument are not validated. The code complexity is in the call of another function to perform the MySQL query.

The SQL Injection is possible because the argument are not validated. The code complexity is in the call of another function to perform the MySQL query.

The SQL Injection is possible if the arguments are not validated.

The SQL Injection is possible if the arguments are not validated.

The SQL Injection is possible because the arguments are not validated before the MySQL query.

The SQL Injection is possible because the arguments are not validated before the MySQL query.

This Cross-Site Scripting example shows how a CGI program in C takes the arguments and print it out.

This Cross-Site Scripting example shows how a CGI program in C takes the arguments and print it out.

In C and C++, one may often accidentally refer to the wrong memory due to the semantics of when math operations are implicitly scaled. (from TCCLASP-5_6_9_10)

Test of tool ability to identify use of an uninitialized variable.

stack overflow

Syslog is called with a user supplied format string. An attempt was made to preformat the buffer but the vulnerability remains. PLOVER: BUFF.OVER, BUFF.FORMAT

The use of a hard-coded password increases the possibility of password guessing tremendously. (from TCCLASP-5_5_9_10-C)

The use of a hard-coded password increases the possibility of password guessing tremendously. (from TCCLASP-5_5_9_10-C)

Sometimes an error is detected, and bad or no action is taken. (from TCCLASP-5_6_19_10)

Sometimes an error is detected, and bad or no action is taken. (from TCCLASP-5_6_19_10)

Test tool ability to identify potential problem of the use of static internal buffer.

this is a test of deprecation