SATE6 - Wireshark 1.2 Test suite #119
DownloadDescription
Wireshark is a network protocol analyzer. Its large code base, complexity and attack surface makes it an interesting candidate for static analysis testing. For SATE VI, we mined buffer errors and pointer issues from CVEs and the Wireshark bug tracker. We manually injected extra bugs to reach 30 buffer errors and 30 pointer issues. Our analysis will focus on these bugs only. The test case contains a buggy and a fixed version. Participants are to run their tool on both separately.
Displaying test cases 1 - 25 of 150 in total
-
CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
-
CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
-
CWE-476: NULL Pointer Dereference
-
CWE-476: NULL Pointer Dereference
-
CWE-124: Buffer Underwrite ('Buffer Underflow') - CWE-127: Buffer Under-read
-
CWE-415: Double Free
-
CWE-416: Use After Free
-
CWE-416: Use After Free
-
CWE-416: Use After Free
-
CWE-823: Use of Out-of-range Pointer Offset
-
CWE-125: Out-of-bounds Read - CWE-824: Access of Uninitialized Pointer
-
CWE-125: Out-of-bounds Read - CWE-823: Use of Out-of-range Pointer Offset - CWE-824: Access of Uninitialized Pointer
-
CWE-416: Use After Free
-
CWE-196: Unsigned to Signed Conversion Error - CWE-754: Improper Check for Unusual or Exceptional Conditions - CWE-824: Access of Uninitialized Pointer
-
CWE-125: Out-of-bounds Read - CWE-822: Untrusted Pointer Dereference - CWE-823: Use of Out-of-range Pointer Offset
-
CWE-476: NULL Pointer Dereference
-
CWE-469: Use of Pointer Subtraction to Determine Size - CWE-823: Use of Out-of-range Pointer Offset
-
CWE-126: Buffer Over-read
-
CWE-415: Double Free
-
CWE-126: Buffer Over-read - CWE-823: Use of Out-of-range Pointer Offset
-
CWE-457: Use of Uninitialized Variable - CWE-824: Access of Uninitialized Pointer
-
CWE-416: Use After Free - CWE-825: Expired Pointer Dereference
-
CWE-170: Improper Null Termination - CWE-788: Access of Memory Location After End of Buffer
-
CWE-126: Buffer Over-read - CWE-823: Use of Out-of-range Pointer Offset
-
CWE-126: Buffer Over-read