Back to the previous page

Test Case ID	153291
Bad / Good / Mixed	Bad
Author	IARPA STONESOUP Test and Evaluation team
Associations	Test suite: 102 Application: 6
Added by	Charles Oliveira
Language	C
Type of test case	Source Code
Input string
Expected Output
Instructions	See src/INSTALL file for instructions on how to install.
Submission date	2015-10-06
Description	This test case implements an incorrect size check when reading from a buffer that can cause a buffer under read. The buffer is declared as a character buffer of size 64 on the heap. 64 bytes of input are copied into the buffer but the test case incorrectly uses the original size of the input string to read the buffer to the output stream in reverse order leading to a buffer under read. Metadata - Base program: Tree - Source Taint: SOCKET - Data Type: SIMPLE - Data Flow: BASIC - Control Flow: SEQUENCE
File(s)	color.c (21.54 kB) service_mon.sh (100 B) C-C127B-CTRE-01-ST03-DT02-DF11-CF20-01.yaml (3.44 kB) runFifos.py (2.67 kB) C-C127B-CTRE-01-ST03-DT02-DF11-CF20-01.xml (43.32 kB)
Flaw	CWE-127: Buffer Under-read • 3

There are no comments

Have any comments on this test case? Please, .

File Contains:
CWE-127: Buffer Under-read on line(s): 588, 589, 590