CWE: 78 OS Command Injection BadSource: environment Read input from an environment variable GoodSource: Fixed string Sinks: popen BadSink : Execute command in data using popen() Flow Variant: 83 Data flow: data passed to class constructor and destructor by declaring the class object on the s...

CWE: 78 OS Command Injection BadSource: environment Read input from an environment variable GoodSource: Fixed string BadSink : Execute command in data using popen() Flow Variant: 82 Data flow: data passed in a parameter to an virtual method called via a pointer

CWE: 78 OS Command Injection BadSource: environment Read input from an environment variable GoodSource: Fixed string Sinks: popen BadSink : Execute command in data using popen() Flow Variant: 81 Data flow: data passed in a parameter to an virtual method called via a reference

CWE: 78 OS Command Injection BadSource: console Read input from the console GoodSource: Fixed string Sinks: system BadSink : Execute command in data using system() Flow Variant: 84 Data flow: data passed to class constructor and destructor by declaring the class object on the heap and deleti...

CWE: 78 OS Command Injection BadSource: console Read input from the console GoodSource: Fixed string Sinks: system BadSink : Execute command in data using system() Flow Variant: 83 Data flow: data passed to class constructor and destructor by declaring the class object on the stack

CWE: 78 OS Command Injection BadSource: console Read input from the console GoodSource: Fixed string BadSink : Execute command in data using system() Flow Variant: 82 Data flow: data passed in a parameter to an virtual method called via a pointer

CWE: 78 OS Command Injection BadSource: console Read input from the console GoodSource: Fixed string Sinks: system BadSink : Execute command in data using system() Flow Variant: 81 Data flow: data passed in a parameter to an virtual method called via a reference

CWE: 78 OS Command Injection BadSource: console Read input from the console GoodSource: Fixed string Sinks: popen BadSink : Execute command in data using popen() Flow Variant: 84 Data flow: data passed to class constructor and destructor by declaring the class object on the heap and deleting...

CWE: 78 OS Command Injection BadSource: console Read input from the console GoodSource: Fixed string Sinks: popen BadSink : Execute command in data using popen() Flow Variant: 83 Data flow: data passed to class constructor and destructor by declaring the class object on the stack

CWE: 78 OS Command Injection BadSource: console Read input from the console GoodSource: Fixed string BadSink : Execute command in data using popen() Flow Variant: 82 Data flow: data passed in a parameter to an virtual method called via a pointer

CWE: 78 OS Command Injection BadSource: console Read input from the console GoodSource: Fixed string Sinks: popen BadSink : Execute command in data using popen() Flow Variant: 81 Data flow: data passed in a parameter to an virtual method called via a reference

CWE: 78 OS Command Injection BadSource: connect_socket Read data using a connect socket (client side) GoodSource: Fixed string Sinks: system BadSink : Execute command in data using system() Flow Variant: 84 Data flow: data passed to class constructor and destructor by declaring the class obj...

CWE: 78 OS Command Injection BadSource: connect_socket Read data using a connect socket (client side) GoodSource: Fixed string Sinks: system BadSink : Execute command in data using system() Flow Variant: 83 Data flow: data passed to class constructor and destructor by declaring the class obj...

CWE: 78 OS Command Injection BadSource: connect_socket Read data using a connect socket (client side) GoodSource: Fixed string BadSink : Execute command in data using system() Flow Variant: 82 Data flow: data passed in a parameter to an virtual method called via a pointer

CWE: 78 OS Command Injection BadSource: connect_socket Read data using a connect socket (client side) GoodSource: Fixed string Sinks: system BadSink : Execute command in data using system() Flow Variant: 81 Data flow: data passed in a parameter to an virtual method called via a reference

CWE: 78 OS Command Injection BadSource: connect_socket Read data using a connect socket (client side) GoodSource: Fixed string Sinks: popen BadSink : Execute command in data using popen() Flow Variant: 84 Data flow: data passed to class constructor and destructor by declaring the class objec...

CWE: 78 OS Command Injection BadSource: connect_socket Read data using a connect socket (client side) GoodSource: Fixed string Sinks: popen BadSink : Execute command in data using popen() Flow Variant: 83 Data flow: data passed to class constructor and destructor by declaring the class objec...

CWE: 78 OS Command Injection BadSource: connect_socket Read data using a connect socket (client side) GoodSource: Fixed string BadSink : Execute command in data using popen() Flow Variant: 82 Data flow: data passed in a parameter to an virtual method called via a pointer

CWE: 78 OS Command Injection BadSource: connect_socket Read data using a connect socket (client side) GoodSource: Fixed string Sinks: popen BadSink : Execute command in data using popen() Flow Variant: 81 Data flow: data passed in a parameter to an virtual method called via a reference

CWE: 789 Uncontrolled Memory Allocation BadSource: rand Set data to result of rand(), which may be zero GoodSource: Small number greater than zero Sinks: GoodSink: Allocate memory with new [] and check the size of the memory to be allocated BadSink : Allocate memory with new [], but incorrec...

CWE: 789 Uncontrolled Memory Allocation BadSource: rand Set data to result of rand(), which may be zero GoodSource: Small number greater than zero Sinks: GoodSink: Allocate memory with new [] and check the size of the memory to be allocated BadSink : Allocate memory with new [], but incorrec...

CWE: 789 Uncontrolled Memory Allocation BadSource: rand Set data to result of rand(), which may be zero GoodSource: Small number greater than zero Sinks: GoodSink: Allocate memory with new [] and check the size of the memory to be allocated BadSink : Allocate memory with new [], but incorrec...

CWE: 789 Uncontrolled Memory Allocation BadSource: rand Set data to result of rand(), which may be zero GoodSource: Small number greater than zero Sinks: GoodSink: Allocate memory with new [] and check the size of the memory to be allocated BadSink : Allocate memory with new [], but incorrec...

CWE: 789 Uncontrolled Memory Allocation BadSource: rand Set data to result of rand(), which may be zero GoodSource: Small number greater than zero Sinks: GoodSink: Allocate memory with new [] and check the size of the memory to be allocated BadSink : Allocate memory with new [], but incorrec...

CWE: 789 Uncontrolled Memory Allocation BadSource: rand Set data to result of rand(), which may be zero GoodSource: Small number greater than zero Sinks: GoodSink: Allocate memory with new [] and check the size of the memory to be allocated BadSink : Allocate memory with new [], but incorrec...