Esempi in C# (CSharp) per testcases.CWE197_Numeric_Truncation_Error CWE197_Numeric_Truncation_Error__long_large_to_short_75b.BadSink

Esempio n. 1

        public override void Bad()
        {
            long data;

            /* FLAW: Use a number larger than int.MaxValue */
            data = int.MaxValue + 5L;
            /* serialize data to a byte array */
            byte[] dataSerialized = null;
            try
            {
                BinaryFormatter bf = new BinaryFormatter();
                using (var ms = new MemoryStream())
                {
                    bf.Serialize(ms, data);
                    dataSerialized = ms.ToArray();
                }
                CWE197_Numeric_Truncation_Error__long_large_to_short_75b.BadSink(dataSerialized);
            }
            catch (SerializationException exceptSerialize)
            {
                IO.Logger.Log(NLog.LogLevel.Warn, "Serialization exception in serialization", exceptSerialize);
            }
        }