Exemplos de testcases.CWE191_Integer_Underflow CWE191_Integer_Underflow__int_QueryString_Web_multiply_53b.BadSink em C# (CSharp)

Exemplo n.º 1

        public override void Bad(HttpRequest req, HttpResponse resp)
        {
            int data;

            data = int.MinValue; /* initialize data in case id is not in query string */
            /* POTENTIAL FLAW: Parse id param out of the URL querystring (without using getParam) */
            {
                if (req.QueryString["id"] != null)
                {
                    try
                    {
                        data = int.Parse(req.QueryString["id"]);
                    }
                    catch (FormatException exceptNumberFormat)
                    {
                        IO.Logger.Log(NLog.LogLevel.Warn, exceptNumberFormat, "Number format exception reading id from query string");
                    }
                }
            }
            CWE191_Integer_Underflow__int_QueryString_Web_multiply_53b.BadSink(data, req, resp);
        }