/* goodG2B() - use goodsource and badsink */ public static void GoodG2BSink(CWE191_Integer_Underflow__int_Listen_tcp_sub_67a.Container dataContainer) { int data = dataContainer.containerOne; /* POTENTIAL FLAW: if data == int.MinValue, this will overflow */ int result = (int)(data - 1); IO.WriteLine("result: " + result); }
/* goodB2G() - use badsource and goodsink */ public static void GoodB2GSink(CWE191_Integer_Underflow__int_Listen_tcp_sub_67a.Container dataContainer) { int data = dataContainer.containerOne; /* FIX: Add a check to prevent an overflow from occurring */ if (data > int.MinValue) { int result = (int)(data - 1); IO.WriteLine("result: " + result); } else { IO.WriteLine("data value is too small to perform subtraction."); } }