/* TEMPLATE GENERATED TESTCASE FILE Filename: CWE78_OS_Command_Injection__wchar_t_listen_socket_w32_spawnvp_82.h Label Definition File: CWE78_OS_Command_Injection.strings.label.xml Template File: sources-sink-82.tmpl.h */ /* * @description * CWE: 78 OS Command Injection * BadSource: listen_socket Read data using a listen socket (server side) * GoodSource: Fixed string * BadSink : execute command with wspawnvp * Flow Variant: 82 Data flow: data passed in a parameter to an virtual method called via a pointer * * */ #include "std_testcase.h" #include #ifdef _WIN32 #define COMMAND_INT_PATH L"%WINDIR%\\system32\\cmd.exe" #define COMMAND_INT L"cmd.exe" #define COMMAND_ARG1 L"/c" #define COMMAND_ARG2 L"dir " #define COMMAND_ARG3 data #else /* NOT _WIN32 */ #include #define COMMAND_INT_PATH L"/bin/sh" #define COMMAND_INT L"sh" #define COMMAND_ARG1 L"-c" #define COMMAND_ARG2 L"ls " #define COMMAND_ARG3 data #endif namespace CWE78_OS_Command_Injection__wchar_t_listen_socket_w32_spawnvp_82 { class CWE78_OS_Command_Injection__wchar_t_listen_socket_w32_spawnvp_82_base { public: /* pure virtual function */ virtual void action(wchar_t * data) = 0; }; #ifndef OMITBAD class CWE78_OS_Command_Injection__wchar_t_listen_socket_w32_spawnvp_82_bad : public CWE78_OS_Command_Injection__wchar_t_listen_socket_w32_spawnvp_82_base { public: void action(wchar_t * data); }; #endif /* OMITBAD */ #ifndef OMITGOOD class CWE78_OS_Command_Injection__wchar_t_listen_socket_w32_spawnvp_82_goodG2B : public CWE78_OS_Command_Injection__wchar_t_listen_socket_w32_spawnvp_82_base { public: void action(wchar_t * data); }; #endif /* OMITGOOD */ }