View/Download Test Cases

Test Suite #59: C++ Test Suite for Source Code Analyzer - weakness suppresion

Created by: Michael Koo on 2007-12-06
Size: 14 test cases
Description: This test suite tests against Source Code Security Analyzer based on functional requirements SCA-RO-2 specified in "Source Code Security Analysis Tool Functional Specification"

Results: 14 test cases.

Select	Test Case ID	Submission Date	Language	Type of Artifact	Status	Description	Weakness	Bad Good Mixed
	2196	2010-11-23	C++	Source Code		This test case shows debugging code is left in the program	CWE-489: Leftover Debug Code
	2062	2007-12-28	C++	Source Code		The test case shows a Heap Overflow by trying to insert out of ...	CWE-122: Heap-based Buffer Overflow
	2054	2007-12-17	C++	Source Code		Created short is not deleted after use.	CWE-401: Improper Release of Memory Before Removing Last Reference ('Memory Leak')
	2043	2007-12-11	C++	Source Code		The test cases shows hard-coded passwords is used.	CWE-259: Use of Hard-coded Password
	2028	2007-11-29	C++	Source Code		A software system that accepts and executes input in the form of ...	CWE-078: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
	2013	2007-10-15	C++	Source Code		The test case shows a resource injection.	CWE-099: Improper Control of Resource Identifiers ('Resource Injection')
	1993	2007-07-13	C++	Source Code		The pointer p is dereferenced even though the value is null.	CWE-476: NULL Pointer Dereference
	1983	2007-07-13	C++	Source Code		The test case has a SQL Injection weakness.	CWE-089: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
	1979	2007-07-13	C++	Source Code		By using a wrong pointer type, the program will output a ...	CWE-468: Incorrect Pointer Scaling
	1977	2007-07-13	C++	Source Code		Integer is not initiated before use	CWE-457: Use of Uninitialized Variable
	1971	2007-07-13	C++	Source Code		user can input more then the max number of characters causing a ...	CWE-121: Stack-based Buffer Overflow
	1965	2007-07-13	C++	Source Code		The test case is a basic CGI source code which allows Cross-Site ...	CWE-079: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
	1954	2007-07-13	C++	Source Code		users can add the arguments -debug -root to take advantage of ...	CWE-489: Leftover Debug Code
	1739	2006-08-21	C++	Source Code		Test of tool ability to identify an unchecked error condition.	CWE-391: Unchecked Error Condition