Defect Type: Inappropriate code Defect Sub-type: Contradict conditions The test case contains coincidental weaknesses along with intended ones as follows for file conflicting_cond.c: * line(s): 26,45,64,85,120,139,159,179 CWE-561

Defect Type: Pointer related defects Defect Sub-type: Comparison NULL with function pointer Description: Defect Free Code to identify false positives while comparison of NULL with function pointers The test case contains coincidental weaknesses along with intended ones as follows for file cmp_fun...

Defect Type: Pointer related defects Defect Sub-type: Comparison NULL with function pointer The test case contains coincidental weaknesses along with intended ones as follows for file cmp_funcadr.c: * line(s): 28,50 CWE-561

Defect Type: Dynamic memory defects Defect Sub-type: Dynamic buffer underrun Description: Defect Free Code to identify false positives in buffer underrun in dynamic memory allocation Created on: Sep 27, 2012 Author: caesaru01 The test case contains coincidental weaknesses along with intended ones...

Defect Type: Dynamic memory defects Defect Sub-type: Dynamic buffer underrun Created on: Sep 27, 2012 Author: caesaru01 The test case contains coincidental weaknesses along with intended ones as follows for file buffer_underrun_dynamic.c: * line(s): 148,154,177,516,518,550,558,668,673,678 CWE-476...

Defect Type: Dynamic memory defects Defect Sub-type: Dynamic buffer overrun Description: Defect Free Code to identify false positives in dynamic buffer overrun Created on: Sep 27, 2012 Author: caesaru01 The test case contains coincidental weaknesses along with intended ones as follows for file bu...

Defect Type: Dynamic memory defects Defect Sub-type: Dynamic buffer overrun Created on: Sep 27, 2012 Author: caesaru01 The test case contains coincidental weaknesses along with intended ones as follows for file buffer_overrun_dynamic.c: * line(s): 145,151,153,173,434,511,513,550,558 CWE-476 * lin...

Defect Type: Numerical defects Defect Sub-type: Bit shift bigger than integral type or negative Description: Defect Free Code to identify false positives in bit shift errors

Defect Type: Numerical defects Defect Sub-type: Bit shift bigger than integral type or negative Description: Defect Code to identify bit shift errors

Unsafe sample sanitize : none construction : try_catch

Safe sample sanitize : none construction : try_catch

Safe sample sanitize : none construction : fopen with condition

Unsafe sample sanitize : none construction : fopen

Unsafe sample sanitize : error_reporting(0) construction : try_catch

Safe sample sanitize : error_reporting(0) construction : try_catch

Safe sample sanitize : error_reporting(0) construction : fopen with condition

Safe sample sanitize : error_reporting(0) construction : fopen

Unsafe sample input : get the $_GET['userData'] in an array SANITIZE : use of http_build_query File : unsafe, use of untrusted data in a property value in a span tag(CSS)

Unsafe sample input : get the $_GET['userData'] in an array SANITIZE : use of http_build_query File : unsafe, use of untrusted data in a quoted property value (CSS)

Unsafe sample input : get the $_GET['userData'] in an array SANITIZE : use of http_build_query File : use of untrusted data in a double quoted property value (CSS)

Unsafe sample input : get the $_GET['userData'] in an array SANITIZE : use of http_build_query File : use of untrusted data in a property value (CSS)

Unsafe sample input : get the $_GET['userData'] in an array SANITIZE : use of http_build_query File : unsafe, use of untrusted data in the function setInterval

Safe sample input : get the $_GET['userData'] in an array SANITIZE : use of http_build_query File : use of untrusted data in a double quoted event handler in a script

Safe sample input : get the $_GET['userData'] in an array SANITIZE : use of http_build_query File : use of untrusted data in a quoted event handler in a script

Safe sample input : get the $_GET['userData'] in an array SANITIZE : use of http_build_query File : use of untrusted data in one side of a double quoted expression in a script