Example #1
0
        /* goodG2B() - use goodsource and badsink */
        private void GoodG2B()
        {
            string data;

            /* FIX: Use a hardcoded string */
            data = "foo";
            CWE134_Externally_Controlled_Format_String__Environment_console_interpolation_53b.GoodG2BSink(data);
        }
Example #2
0
        /* goodB2G() - use badsource and goodsink */
        private void GoodB2G()
        {
            string data;

            /* get environment variable ADD */
            /* POTENTIAL FLAW: Read data from an environment variable */
            data = Environment.GetEnvironmentVariable("ADD");
            CWE134_Externally_Controlled_Format_String__Environment_console_interpolation_53b.GoodB2GSink(data);
        }