Test Suite #101: C Test Suite for Source Code Analyzer v2 - Secure

Created by: Aurelien Delaitre on 2015-03-16
Size: 102 test cases
Description: This test suite replaces test suite 46 based on a collaboration with Alexander Hoole from University of Victoria, BC, Canada. The new test cases provided by these test suites contain the following improvements: removal of targeted weaknesses from 13 "GOOD" test cases in test suite 46, removal of extraneous weaknesses, replacement of test cases to align with the CWEs specified in NIST SP 500-268 v1.1, creation of additional test cases to provide consistent BAD/GOOD pairings, application of minor improvements to code, renaming of files and the addition of FLAW/FIX comments to assist automation, and insertion of improved metadata to assist researchers using SARD. Please refer to the test case metadata fields to view additional information for each test case. Note: Some test cases have been deprecated and replaced with fixed versions since this test suite has been initially published.

To view a specific test case, click on ID of the test case (second column)

To download specific test cases, select them then click on "Download selected test cases Download the selected Test Cases

" icon at the top right of the page

Results: 102 test cases in 6 pages. Pages: 1 2 3 4 5 6
Go to page:

Select	Test Case ID	Submission Date	Language	Type of Artifact	Status	Description	Weakness	Bad Good Mixed
	149206	2015-03-23	C	Source Code		This test case shows an effort made to avoid OS command ...	CWE-078: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
	149204	2015-03-23	C	Source Code		The test case avoids a use of an allocated memory after being freed.	CWE-416: Use After Free
	149202	2015-03-23	C	Source Code		An example to prevent heap overflow.	CWE-122: Heap-based Buffer Overflow
	149200	2015-03-23	C	Source Code		The test cases implements CVE-2002-1869: Checks if you can write ...	CWE-412: Unrestricted Externally Accessible Lock
	149198	2015-03-23	C	Source Code		Initializing a variable to avoid using its unitialized value.	CWE-457: Use of Uninitialized Variable
	149196	2015-03-23	C	Source Code		The test case avoids improper null termination with a buffer addresst	CWE-170: Improper Null Termination
	149194	2015-03-23	C	Source Code		No buffer overflow even if the input is not validated. Every ...	CWE-121: Stack-based Buffer Overflow
	149192	2015-03-23	C	Source Code		The variable px now is initialized, avoiding the use of an ...	CWE-457: Use of Uninitialized Variable
	149190	2015-03-23	C	Source Code		No memory leak, the allocated memory is freed.	CWE-401: Improper Release of Memory Before Removing Last Reference ('Memory Leak')
	149188	2015-03-23	C	Source Code		The SQL Injection is not possible because the arguments are ...	CWE-089: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
	149186	2015-03-23	C	Source Code		If we check the return of scanf we know how many parameters have ...	CWE-391: Unchecked Error Condition
	149184	2015-03-23	C	Source Code		The test case shows a correct pointer scaling.	CWE-468: Incorrect Pointer Scaling
	149182	2015-03-23	C	Source Code		The test case prevents a memory leak by releasing memory ...	CWE-401: Improper Release of Memory Before Removing Last Reference ('Memory Leak')
	149180	2015-03-23	C	Source Code		The test case prevents a memory leak with a pointer which is in ...	CWE-401: Improper Release of Memory Before Removing Last Reference ('Memory Leak')
	149178	2015-03-23	C	Source Code		The test case avoids a Cross-Site Scripting (XSS) in a C/CGI programw	CWE-080: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
	149176	2015-03-23	C	Source Code		The test case avoids a Cross-Site Scripting (XSS) in a C/CGI programw	CWE-080: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
	149174	2015-03-23	C	Source Code		The test case avoids a Cross-Site Scripting (XSS) in a C/CGI programw	CWE-080: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
	149172	2015-03-23	C	Source Code		The test case avoids a use of an allocated memory after being ...	CWE-416: Use After Free
	149170	2015-03-23	C	Source Code		The test case avoids a Stack Overflow by fixing a bad loop exit ...	CWE-121: Stack-based Buffer Overflow
	149168	2015-03-23	C	Source Code		The test case avoids a Stack Overflow by fixing a bad array index.	CWE-121: Stack-based Buffer Overflow