CWE: 190 Integer Overflow BadSource: fscanf Read data from the console using fscanf() GoodSource: Set data to a small, non-zero number (two) Sinks: add GoodSink: Ensure there will not be an overflow before adding 1 to data BadSink : Add 1 to data, which can cause an overflow Flow Variant: 0...

CWE: 188 Reliance on Data Memory Layout Sinks: union GoodSink: Use mechanisms that are not dependent upon size, alignment/packing, or byte order to accomplish equivalent functionality BadSink : Modify a union member by relying on the byte-order, size, alignment/packing of struct and union fiel...

CWE: 188 Reliance on Data Memory Layout Sinks: union GoodSink: Use mechanisms that are not dependent upon size, alignment/packing, or byte order to accomplish equivalent functionality BadSink : Modify a union member by relying on the byte-order, size, alignment/packing of struct and union fiel...

CWE: 188 Reliance on Data Memory Layout Sinks: union GoodSink: Use mechanisms that are not dependent upon size, alignment/packing, or byte order to accomplish equivalent functionality BadSink : Modify a union member by relying on the byte-order, size, alignment/packing of struct and union fiel...

CWE: 188 Reliance on Data Memory Layout Sinks: union GoodSink: Use mechanisms that are not dependent upon size, alignment/packing, or byte order to accomplish equivalent functionality BadSink : Modify a union member by relying on the byte-order, size, alignment/packing of struct and union fiel...

CWE: 188 Reliance on Data Memory Layout Sinks: union GoodSink: Use mechanisms that are not dependent upon size, alignment/packing, or byte order to accomplish equivalent functionality BadSink : Modify a union member by relying on the byte-order, size, alignment/packing of struct and union fiel...

CWE: 188 Reliance on Data Memory Layout Sinks: union GoodSink: Use mechanisms that are not dependent upon size, alignment/packing, or byte order to accomplish equivalent functionality BadSink : Modify a union member by relying on the byte-order, size, alignment/packing of struct and union fiel...

CWE: 188 Reliance on Data Memory Layout Sinks: union GoodSink: Use mechanisms that are not dependent upon size, alignment/packing, or byte order to accomplish equivalent functionality BadSink : Modify a union member by relying on the byte-order, size, alignment/packing of struct and union fiel...

CWE: 188 Reliance on Data Memory Layout Sinks: union GoodSink: Use mechanisms that are not dependent upon size, alignment/packing, or byte order to accomplish equivalent functionality BadSink : Modify a union member by relying on the byte-order, size, alignment/packing of struct and union fiel...

CWE: 188 Reliance on Data Memory Layout Sinks: union GoodSink: Use mechanisms that are not dependent upon size, alignment/packing, or byte order to accomplish equivalent functionality BadSink : Modify a union member by relying on the byte-order, size, alignment/packing of struct and union fiel...

CWE: 188 Reliance on Data Memory Layout Sinks: union GoodSink: Use mechanisms that are not dependent upon size, alignment/packing, or byte order to accomplish equivalent functionality BadSink : Modify a union member by relying on the byte-order, size, alignment/packing of struct and union fiel...

CWE: 188 Reliance on Data Memory Layout Sinks: union GoodSink: Use mechanisms that are not dependent upon size, alignment/packing, or byte order to accomplish equivalent functionality BadSink : Modify a union member by relying on the byte-order, size, alignment/packing of struct and union fiel...

CWE: 188 Reliance on Data Memory Layout Sinks: union GoodSink: Use mechanisms that are not dependent upon size, alignment/packing, or byte order to accomplish equivalent functionality BadSink : Modify a union member by relying on the byte-order, size, alignment/packing of struct and union fiel...

CWE: 188 Reliance on Data Memory Layout Sinks: union GoodSink: Use mechanisms that are not dependent upon size, alignment/packing, or byte order to accomplish equivalent functionality BadSink : Modify a union member by relying on the byte-order, size, alignment/packing of struct and union fiel...

CWE: 188 Reliance on Data Memory Layout Sinks: union GoodSink: Use mechanisms that are not dependent upon size, alignment/packing, or byte order to accomplish equivalent functionality BadSink : Modify a union member by relying on the byte-order, size, alignment/packing of struct and union fiel...

CWE: 188 Reliance on Data Memory Layout Sinks: union GoodSink: Use mechanisms that are not dependent upon size, alignment/packing, or byte order to accomplish equivalent functionality BadSink : Modify a union member by relying on the byte-order, size, alignment/packing of struct and union fiel...

CWE: 188 Reliance on Data Memory Layout Sinks: union GoodSink: Use mechanisms that are not dependent upon size, alignment/packing, or byte order to accomplish equivalent functionality BadSink : Modify a union member by relying on the byte-order, size, alignment/packing of struct and union fiel...

CWE: 188 Reliance on Data Memory Layout Sinks: union GoodSink: Use mechanisms that are not dependent upon size, alignment/packing, or byte order to accomplish equivalent functionality BadSink : Modify a union member by relying on the byte-order, size, alignment/packing of struct and union fiel...

CWE: 188 Reliance on Data Memory Layout Sinks: union GoodSink: Use mechanisms that are not dependent upon size, alignment/packing, or byte order to accomplish equivalent functionality BadSink : Modify a union member by relying on the byte-order, size, alignment/packing of struct and union fiel...

CWE: 188 Reliance on Data Memory Layout Sinks: modify_local GoodSink: Modify the second field of the struct using the field name BadSink : Attempt to modify second field in struct, assuming the first field is an int Flow Variant: 18 Control flow: goto statements

CWE: 188 Reliance on Data Memory Layout Sinks: modify_local GoodSink: Modify the second field of the struct using the field name BadSink : Attempt to modify second field in struct, assuming the first field is an int Flow Variant: 17 Control flow: for loops

CWE: 188 Reliance on Data Memory Layout Sinks: modify_local GoodSink: Modify the second field of the struct using the field name BadSink : Attempt to modify second field in struct, assuming the first field is an int Flow Variant: 16 Control flow: while(1)

CWE: 188 Reliance on Data Memory Layout Sinks: modify_local GoodSink: Modify the second field of the struct using the field name BadSink : Attempt to modify second field in struct, assuming the first field is an int Flow Variant: 15 Control flow: switch(6)

CWE: 188 Reliance on Data Memory Layout Sinks: modify_local GoodSink: Modify the second field of the struct using the field name BadSink : Attempt to modify second field in struct, assuming the first field is an int Flow Variant: 14 Control flow: if(globalFive==5) and if(globalFive!=5)

CWE: 188 Reliance on Data Memory Layout Sinks: modify_local GoodSink: Modify the second field of the struct using the field name BadSink : Attempt to modify second field in struct, assuming the first field is an int Flow Variant: 13 Control flow: if(GLOBAL_CONST_FIVE==5) and if(GLOBAL_CONST_F...