National Institute of Standards and Technology
Package illustrating a test case

Test case 154373

Description

This test takes a filename that is used as a representation of an externally accessible and unrestricted mutex lock. The weakness will then attempt to grab this lock by checking for the files existence, and creating the file if it doesn't exist. If the file does exist, the weakness will hang until it is deleted, indefinitely.
Metadata
- Base program: Apache Lenya
- Source Taint: ENVIRONMENT_VARIABLE
- Data Type: SIMPLE
- Data Flow: ADDRESS_AS_FUNCTION_RETURN_VALUE
- Control Flow: INTERRUPT

Flaws

Test Suites

Have any comments on this test case? Please, send us an email.