Back to the previous page

Test Case ID	149277
Bad / Good / Mixed	Bad
Author	IARPA STONESOUP Test and Evaluation team
Associations	Test suite: 102 Application: 5
Added by	Charles Oliveira
Language	C
Type of test case	Source Code
Input string
Expected Output
Instructions	See src/INSTALL file for instructions on how to install.
Submission date	2015-10-06
Description	This test case reads the taint source. If it contains a non-alphanumeric value, the source taint buffer is set to NULL. Subsequently, strcpy is called with the source taint buffer as this source. This causes a null pointer dereference. Metadata - Base program: PostgreSQL - Source Taint: FILE_CONTENTS - Data Type: VOID_POINTER - Data Flow: VAR_ARG_LIST - Control Flow: POINTER_TO_FUNCTION
File(s)	hashfn.c (7.61 kB) runFifos.py (2.67 kB) service_mon.sh (100 B) C-C476E-PSQL-06-ST02-DT03-DF12-CF18-01.xml (75.18 kB) C-C476E-PSQL-06-ST02-DT03-DF12-CF18-01.yaml (6.58 kB)
Flaw	CWE-476: NULL Pointer Dereference • 6

There are no comments

Have any comments on this test case? Please, .

File Contains:
CWE-476: NULL Pointer Dereference on line(s): 205, 206, 207, 208, 209, 210