Ejemplos de testcases.CWE197_Numeric_Truncation_Error CWE197_Numeric_Truncation_Error__int_Environment_to_byte_54b.BadSink en C# (CSharp)

Ejemplo n.º 1

Archivo: CWE197_Numeric_Truncation_Error__int_Environment_to_byte_54a.cs Proyecto: Anzsley/Juliet_Test_Suite_v1.3_for_C_Sharp

        public override void Bad()
        {
            int data;

            data = int.MinValue; /* Initialize data */
            /* get environment variable ADD */
            /* POTENTIAL FLAW: Read data from an environment variable */
            {
                string stringNumber = Environment.GetEnvironmentVariable("ADD");
                if (stringNumber != null) // avoid NPD incidental warnings
                {
                    try
                    {
                        data = int.Parse(stringNumber.Trim());
                    }
                    catch (FormatException exceptNumberFormat)
                    {
                        IO.Logger.Log(NLog.LogLevel.Warn, exceptNumberFormat, "Number format exception parsing data from string");
                    }
                }
            }
            CWE197_Numeric_Truncation_Error__int_Environment_to_byte_54b.BadSink(data);
        }