C# (CSharp) testcases.CWE129_Improper_Validation_of_Array_Index CWE129_Improper_Validation_of_Array_Index__Environment_array_read_no_check_74b.BadSink Examples

Example #1

        public override void Bad()
        {
            int data;

            data = int.MinValue; /* Initialize data */
            /* get environment variable ADD */
            /* POTENTIAL FLAW: Read data from an environment variable */
            {
                string stringNumber = Environment.GetEnvironmentVariable("ADD");
                if (stringNumber != null) // avoid NPD incidental warnings
                {
                    try
                    {
                        data = int.Parse(stringNumber.Trim());
                    }
                    catch (FormatException exceptNumberFormat)
                    {
                        IO.Logger.Log(NLog.LogLevel.Warn, exceptNumberFormat, "Number format exception parsing data from string");
                    }
                }
            }
            Dictionary <int, int> dataDictionary = new Dictionary <int, int>();

            dataDictionary.Add(0, data);
            dataDictionary.Add(1, data);
            dataDictionary.Add(2, data);
            CWE129_Improper_Validation_of_Array_Index__Environment_array_read_no_check_74b.BadSink(dataDictionary);
        }