C# (CSharp) testcases.CWE117_Improper_Output_Neutralization_for_Logs CWE117_Improper_Output_Neutralization_for_Logs__File_22b.GoodB2G1Sink Beispiele

Beispiel #1

Datei: CWE117_Improper_Output_Neutralization_for_Logs__File_22a.cs Projekt: Anzsley/Juliet_Test_Suite_v1.3_for_C_Sharp

        /* goodB2G1() - use badsource and goodsink by setting the static variable to false instead of true */
        private void GoodB2G1()
        {
            string data = null;

            data = ""; /* Initialize data */
            {
                try
                {
                    /* read string from file into data */
                    using (StreamReader sr = new StreamReader("data.txt"))
                    {
                        /* POTENTIAL FLAW: Read data from a file */

                        /* This will be reading the first "line" of the file, which
                         * could be very long if there are little or no newlines in the file */
                        data = sr.ReadLine();
                    }
                }
                catch (IOException exceptIO)
                {
                    IO.Logger.Log(NLog.LogLevel.Warn, exceptIO, "Error with stream reading");
                }
            }
            goodB2G1PublicStatic = false;
            CWE117_Improper_Output_Neutralization_for_Logs__File_22b.GoodB2G1Sink(data);
        }