Juliet Java 1.3 with extra support Test suite #109

CWE: 23 Relative Path Traversal BadSource: listen_tcp Read data using a listening tcp connection GoodSource: A hardcoded string BadSink: readFile no validation Flow Variant: 17 Control flow: for loops

CWE: 23 Relative Path Traversal BadSource: listen_tcp Read data using a listening tcp connection GoodSource: A hardcoded string Sinks: readFile BadSink : no validation Flow Variant: 21 Control flow: Flow controlled by value of a private variable. All functions contained in one file.

CWE: 23 Relative Path Traversal BadSource: listen_tcp Read data using a listening tcp connection GoodSource: A hardcoded string Sinks: readFile BadSink : no validation Flow Variant: 22 Control flow: Flow controlled by value of a public static variable. Sink functions are in a separate file f...

CWE: 23 Relative Path Traversal BadSource: listen_tcp Read data using a listening tcp connection GoodSource: A hardcoded string Sinks: readFile BadSink : no validation Flow Variant: 31 Data flow: make a copy of data within the same method

CWE: 23 Relative Path Traversal BadSource: listen_tcp Read data using a listening tcp connection GoodSource: A hardcoded string BadSink: readFile no validation Flow Variant: 41 Data flow: data passed as an argument from one method to another in the same class

CWE: 23 Relative Path Traversal BadSource: listen_tcp Read data using a listening tcp connection GoodSource: A hardcoded string BadSink: readFile no validation Flow Variant: 42 Data flow: data returned from one method to another in the same class

CWE: 23 Relative Path Traversal BadSource: listen_tcp Read data using a listening tcp connection GoodSource: A hardcoded string Sinks: readFile BadSink : no validation Flow Variant: 45 Data flow: data passed as a private class member variable from one function to another in the same class

CWE: 23 Relative Path Traversal BadSource: listen_tcp Read data using a listening tcp connection GoodSource: A hardcoded string BadSink: readFile no validation Flow Variant: 51 Data flow: data passed as an argument from one function to another in different classes in the same package

CWE: 23 Relative Path Traversal BadSource: listen_tcp Read data using a listening tcp connection GoodSource: A hardcoded string Sinks: readFile BadSink : no validation Flow Variant: 52 Data flow: data passed as an argument from one method to another to another in three different classes in t...

CWE: 23 Relative Path Traversal BadSource: listen_tcp Read data using a listening tcp connection GoodSource: A hardcoded string Sinks: readFile BadSink : no validation Flow Variant: 53 Data flow: data passed as an argument from one method through two others to a fourth; all four functions ar...

CWE: 23 Relative Path Traversal BadSource: listen_tcp Read data using a listening tcp connection GoodSource: A hardcoded string Sinks: readFile BadSink : no validation Flow Variant: 54 Data flow: data passed as an argument from one method through three others to a fifth; all five functions a...

CWE: 23 Relative Path Traversal BadSource: listen_tcp Read data using a listening tcp connection GoodSource: A hardcoded string Sinks: readFile BadSink : no validation Flow Variant: 61 Data flow: data returned from one method to another in different classes in the same package

CWE: 23 Relative Path Traversal BadSource: listen_tcp Read data using a listening tcp connection GoodSource: A hardcoded string Sinks: readFile BadSink : no validation Flow Variant: 66 Data flow: data passed in an array from one method to another in different source files in the same package

CWE: 23 Relative Path Traversal BadSource: listen_tcp Read data using a listening tcp connection GoodSource: A hardcoded string Sinks: readFile BadSink : no validation Flow Variant: 67 Data flow: data passed in a class from one method to another in different source files in the same package

CWE: 23 Relative Path Traversal BadSource: listen_tcp Read data using a listening tcp connection GoodSource: A hardcoded string BadSink: readFile no validation Flow Variant: 68 Data flow: data passed as a member variable in the a class, which is used by a method in another class in the same p...

CWE: 23 Relative Path Traversal BadSource: listen_tcp Read data using a listening tcp connection GoodSource: A hardcoded string Sinks: readFile BadSink : no validation Flow Variant: 71 Data flow: data passed as an Object reference argument from one method to another in different classes in t...

CWE: 23 Relative Path Traversal BadSource: listen_tcp Read data using a listening tcp connection GoodSource: A hardcoded string Sinks: readFile BadSink : no validation Flow Variant: 72 Data flow: data passed in a Vector from one method to another in different source files in the same package

CWE: 23 Relative Path Traversal BadSource: listen_tcp Read data using a listening tcp connection GoodSource: A hardcoded string Sinks: readFile BadSink : no validation Flow Variant: 73 Data flow: data passed in a LinkedList from one method to another in different source files in the same pac...

CWE: 23 Relative Path Traversal BadSource: listen_tcp Read data using a listening tcp connection GoodSource: A hardcoded string Sinks: readFile BadSink : no validation Flow Variant: 74 Data flow: data passed in a HashMap from one method to another in different source files in the same package

CWE: 23 Relative Path Traversal BadSource: listen_tcp Read data using a listening tcp connection GoodSource: A hardcoded string Sinks: readFile BadSink : no validation Flow Variant: 75 Data flow: data passed in a serialized object from one method to another in different source files in the s...

CWE: 23 Relative Path Traversal BadSource: listen_tcp Read data using a listening tcp connection GoodSource: A hardcoded string Sinks: readFile BadSink : no validation Flow Variant: 81 Data flow: data passed in a parameter to an abstract method

Explicitly throw an Error that will not be caught by any code and the JVM will halt. Unfortunately the design of our test cases dont let us throw an Exception (runTest() in AbstractTestCase is not declared as throwing anything and adding a throw cascades to updates to all test case files).

CWE: 252 Unchecked Return Value Sinks: GoodSink: Check the return value from FileInputStream.read() and handle possible errors BadSink : Do not check the return value of FileInputStream.read() Flow Variant: 01 Baseline

CWE: 252 Unchecked Return Value Sinks: GoodSink: Check the return value from FileInputStream.read() and handle possible errors BadSink : Do not check the return value of FileInputStream.read() Flow Variant: 02 Control flow: if(true) and if(false)

CWE: 252 Unchecked Return Value Sinks: GoodSink: Check the return value from FileInputStream.read() and handle possible errors BadSink : Do not check the return value of FileInputStream.read() Flow Variant: 03 Control flow: if(5==5) and if(5!=5)