C# (CSharp) testcases.CWE15_External_Control_of_System_or_Configuration_Setting CWE15_External_Control_of_System_or_Configuration_Setting__File_68b Examples

Example #1

File: CWE15_External_Control_of_System_or_Configuration_Setting__File_68a.cs Project: Anzsley/Juliet_Test_Suite_v1.3_for_C_Sharp

        public override void Bad()
        {
            data = ""; /* Initialize data */
            {
                try
                {
                    /* read string from file into data */
                    using (StreamReader sr = new StreamReader("data.txt"))
                    {
                        /* POTENTIAL FLAW: Read data from a file */

                        /* This will be reading the first "line" of the file, which
                         * could be very long if there are little or no newlines in the file */
                        data = sr.ReadLine();
                    }
                }
                catch (IOException exceptIO)
                {
                    IO.Logger.Log(NLog.LogLevel.Warn, exceptIO, "Error with stream reading");
                }
            }
            CWE15_External_Control_of_System_or_Configuration_Setting__File_68b.BadSink();
        }

Example #2

File: CWE15_External_Control_of_System_or_Configuration_Setting__File_68a.cs Project: Anzsley/Juliet_Test_Suite_v1.3_for_C_Sharp

 /* goodG2B() - use goodsource and badsink */
 private static void GoodG2B()
 {
     /* FIX: Use a hardcoded string */
     data = "foo";
     CWE15_External_Control_of_System_or_Configuration_Setting__File_68b.GoodG2BSink();
 }