Package illustrating a test case

Test case 1648

Type: source code
Pairs: 1647-v1.0.0
State: good
Author: Fortify Software
Status: candidate
Language: C
Submission Date: 22 Jun 2006

Description

Execl() is called with user-provided data but only if it matches an item in a safe list.

Flaws

CWE-20 Improper Input Validation

Test Suites

ABM 1.0.1

Have any comments on this test case? Please, send us an email.