Package illustrating a test case

Test case 1637

Type: source code
Pairs: 1638-v1.0.0
State: bad
Author: Fortify Software
Status: candidate
Language: C
Submission Date: 22 Jun 2006

Description

Sprintf is used to copy a string to a stack buffer. The length is guarded with a length specifier in the format string but the wrong length is given.

Flaws

CWE-121 Stack-based Buffer Overflow

Test Suites

ABM 1.0.1

Have any comments on this test case? Please, send us an email.