Example #1
0
        /* goodG2B() - use goodsource and badsink */
        private void GoodG2B()
        {
            string data;

            /* FIX: Use a hardcoded string */
            data = "foo";
            CWE15_External_Control_of_System_or_Configuration_Setting__Environment_53b.GoodG2BSink(data);
        }
Example #2
0
        public override void Bad()
        {
            string data;

            /* get environment variable ADD */
            /* POTENTIAL FLAW: Read data from an environment variable */
            data = Environment.GetEnvironmentVariable("ADD");
            CWE15_External_Control_of_System_or_Configuration_Setting__Environment_53b.BadSink(data);
        }