/* goodG2B() - use goodsource and badsink */ private static void GoodG2B(HttpRequest req, HttpResponse resp) { int data = CWE190_Integer_Overflow__int_QueryString_Web_add_61b.GoodG2BSource(req, resp); /* POTENTIAL FLAW: if data == int.MaxValue, this will overflow */ int result = (int)(data + 1); IO.WriteLine("result: " + result); }
/* goodB2G() - use badsource and goodsink */ private static void GoodB2G(HttpRequest req, HttpResponse resp) { int data = CWE190_Integer_Overflow__int_QueryString_Web_add_61b.GoodB2GSource(req, resp); /* FIX: Add a check to prevent an overflow from occurring */ if (data < int.MaxValue) { int result = (int)(data + 1); IO.WriteLine("result: " + result); } else { IO.WriteLine("data value is too large to perform addition."); } }