Example #1
0
        /* goodG2B() - use goodsource and badsink */
        public static void GoodG2BSink(CWE190_Integer_Overflow__int_NetClient_add_67a.Container dataContainer)
        {
            int data = dataContainer.containerOne;
            /* POTENTIAL FLAW: if data == int.MaxValue, this will overflow */
            int result = (int)(data + 1);

            IO.WriteLine("result: " + result);
        }
Example #2
0
        /* goodB2G() - use badsource and goodsink */
        public static void GoodB2GSink(CWE190_Integer_Overflow__int_NetClient_add_67a.Container dataContainer)
        {
            int data = dataContainer.containerOne;

            /* FIX: Add a check to prevent an overflow from occurring */
            if (data < int.MaxValue)
            {
                int result = (int)(data + 1);
                IO.WriteLine("result: " + result);
            }
            else
            {
                IO.WriteLine("data value is too large to perform addition.");
            }
        }