| - - Package securibench.micro - - | -||
| - - Package securibench.micro.aliasing - - | -||
| - | ||
| Test Aliasing1 | -- - | -|
| Class: securibench.micro.aliasing.Aliasing1 | -Description: simple aliasing because of assignment | -Expected bug count: 1 | -
| - | ||
| Test Aliasing2 | -- - | -|
| Class: securibench.micro.aliasing.Aliasing2 | -Description: simple aliasing false positive | -Expected bug count: 1 | -
| - | ||
| Test Aliasing3 | -- - | -|
| Class: securibench.micro.aliasing.Aliasing3 | -Description: simple aliasing of an array element | -Expected bug count: 1 | -
| - | ||
| Test Aliasing4 | -- - | -|
| Class: securibench.micro.aliasing.Aliasing4 | -Description: simple aliasing with casts | -Expected bug count: 1 | -
| - | ||
| Test Aliasing5 | -- - | -|
| Class: securibench.micro.aliasing.Aliasing5 | -Description: interprocedural argument aliasing | -Expected bug count: 1 | -
| - | ||
| Test Aliasing6 | -- - | -|
| Class: securibench.micro.aliasing.Aliasing6 | -Description: aliasing with copy propagation | -Expected bug count: 7 | -
| - - Package securibench.micro.arrays - - | -||
| - | ||
| Test Arrays1 | -- - | -|
| Class: securibench.micro.arrays.Arrays1 | -Description: a simple array test | -Expected bug count: 1 | -
| - | ||
| Test Arrays10 | -- - | -|
| Class: securibench.micro.arrays.Arrays10 | -Description: comple multidimentional array test | -Expected bug count: 1 | -
| - | ||
| Test Arrays2 | -- - | -|
| Class: securibench.micro.arrays.Arrays2 | -Description: a more complex array test | -Expected bug count: 1 | -
| - | ||
| Test Arrays3 | -- - | -|
| Class: securibench.micro.arrays.Arrays3 | -Description: a more complex array test | -Expected bug count: 1 | -
| - | ||
| Test Arrays4 | -- - | -|
| Class: securibench.micro.arrays.Arrays4 | -Description: a test of array indeces | -Expected bug count: 1 | -
| - | ||
| Test Arrays5 | -- - | -|
| Class: securibench.micro.arrays.Arrays5 | -Description: strong updates to array elements | -Expected bug count: 0 | -
| - | ||
| Test Arrays6 | -- - | -|
| Class: securibench.micro.arrays.Arrays6 | -Description: strong updates to array elements | -Expected bug count: 1 | -
| - | ||
| Test Arrays7 | -- - | -|
| Class: securibench.micro.arrays.Arrays7 | -Description: test of array initializers | -Expected bug count: 1 | -
| - | ||
| Test Arrays8 | -- - | -|
| Class: securibench.micro.arrays.Arrays8 | -Description: test of array initializers | -Expected bug count: 1 | -
| - | ||
| Test Arrays9 | -- - | -|
| Class: securibench.micro.arrays.Arrays9 | -Description: multidimentional arrays | -Expected bug count: 1 | -
| - - Package securibench.micro.basic - - | -||
| - | ||
| Test Basic1 | -- - | -|
| Class: securibench.micro.basic.Basic1 | -Description: very simple XSS | -Expected bug count: 1 | -
| - | ||
| Test Basic10 | -- - | -|
| Class: securibench.micro.basic.Basic10 | -Description: chains of value assignments | -Expected bug count: 1 | -
| - | ||
| Test Basic11 | -- - | -|
| Class: securibench.micro.basic.Basic11 | -Description: a simple false positive because of two calls to String.toLowerCase | -Expected bug count: 2 | -
| - | ||
| Test Basic12 | -- - | -|
| Class: securibench.micro.basic.Basic12 | -Description: a simple conditional; both branches should be taken | -Expected bug count: 2 | -
| - | ||
| Test Basic13 | -- - | -|
| Class: securibench.micro.basic.Basic13 | -Description: use getInitParameter instead | -Expected bug count: 1 | -
| - | ||
| Test Basic14 | -- - | -|
| Class: securibench.micro.basic.Basic14 | -Description: use the servlet context and casts | -Expected bug count: 1 | -
| - | ||
| Test Basic15 | -- - | -|
| Class: securibench.micro.basic.Basic15 | -Description: test casts more exhaustively | -Expected bug count: 1 | -
| - | ||
| Test Basic16 | -- - | -|
| Class: securibench.micro.basic.Basic16 | -Description: simple heap-allocated data strucure | -Expected bug count: 1 | -
| - | ||
| Test Basic17 | -- - | -|
| Class: securibench.micro.basic.Basic17 | -Description: simple heap-allocated data strucure | -Expected bug count: 1 | -
| - | ||
| Test Basic18 | -- - | -|
| Class: securibench.micro.basic.Basic18 | -Description: protect agains simple loop unrolling | -Expected bug count: 1 | -
| - | ||
| Test Basic19 | -- - | -|
| Class: securibench.micro.basic.Basic19 | -Description: simple SQL injection with prepared statements | -Expected bug count: 1 | -
| - | ||
| Test Basic2 | -- - | -|
| Class: securibench.micro.basic.Basic2 | -Description: XSS combined with a simple conditional | -Expected bug count: 1 | -
| - | ||
| Test Basic20 | -- - | -|
| Class: securibench.micro.basic.Basic20 | -Description: simple SQL injection | -Expected bug count: 1 | -
| - | ||
| Test Basic21 | -- - | -|
| Class: securibench.micro.basic.Basic21 | -Description: SQL injection with less commonly used methods | -Expected bug count: 4 | -
| - | ||
| Test Basic22 | -- - | -|
| Class: securibench.micro.basic.Basic22 | -Description: basic path traversal | -Expected bug count: 1 | -
| - | ||
| Test Basic23 | -- - | -|
| Class: securibench.micro.basic.Basic23 | -Description: path traversal | -Expected bug count: 3 | -
| - | ||
| Test Basic24 | -- - | -|
| Class: securibench.micro.basic.Basic24 | -Description: unsafe redirect | -Expected bug count: 1 | -
| - | ||
| Test Basic25 | -- - | -|
| Class: securibench.micro.basic.Basic25 | -Description: test getParameterValues | -Expected bug count: 1 | -
| - | ||
| Test Basic26 | -- - | -|
| Class: securibench.micro.basic.Basic26 | -Description: test getParameterMap | -Expected bug count: 1 | -
| - | ||
| Test Basic27 | -- - | -|
| Class: securibench.micro.basic.Basic27 | -Description: test getParameterMap | -Expected bug count: 1 | -
| - | ||
| Test Basic28 | -- - | -|
| Class: securibench.micro.basic.Basic28 | -Description: complicated control flow | -Expected bug count: 2 | -
| - | ||
| Test Basic29 | -- - | -|
| Class: securibench.micro.basic.Basic29 | -Description: recursive data structures | -Expected bug count: 2 | -
| - | ||
| Test Basic3 | -- - | -|
| Class: securibench.micro.basic.Basic3 | -Description: simple derived string test | -Expected bug count: 1 | -
| - | ||
| Test Basic30 | -- - | -|
| Class: securibench.micro.basic.Basic30 | -Description: field sensitivity | -Expected bug count: 1 | -
| - | ||
| Test Basic31 | -- - | -|
| Class: securibench.micro.basic.Basic31 | -Description: values obtained from cookies | -Expected bug count: 2 | -
| - | ||
| Test Basic32 | -- - | -|
| Class: securibench.micro.basic.Basic32 | -Description: values obtained from headers | -Expected bug count: 1 | -
| - | ||
| Test Basic33 | -- - | -|
| Class: securibench.micro.basic.Basic33 | -Description: values obtained from headers | -Expected bug count: 1 | -
| - | ||
| Test Basic34 | -- - | -|
| Class: securibench.micro.basic.Basic34 | -Description: values obtained from headers | -Expected bug count: 2 | -
| - | ||
| Test Basic35 | -- - | -|
| Class: securibench.micro.basic.Basic35 | -Description: values obtained from HttpServletRequest | -Expected bug count: 6 | -
| - | ||
| Test Basic36 | -- - | -|
| Class: securibench.micro.basic.Basic36 | -Description: values obtained from HttpServletRequest input stream | -Expected bug count: 1 | -
| - | ||
| Test Basic37 | -- - | -|
| Class: securibench.micro.basic.Basic37 | -Description: StringTokenizer test | -Expected bug count: 1 | -
| - | ||
| Test Basic38 | -- - | -|
| Class: securibench.micro.basic.Basic38 | -Description: StringTokenizer test with a false positive | -Expected bug count: 1 | -
| - | ||
| Test Basic39 | -- - | -|
| Class: securibench.micro.basic.Basic39 | -Description: StringTokenizer test | -Expected bug count: 1 | -
| - | ||
| Test Basic4 | -- - | -|
| Class: securibench.micro.basic.Basic4 | -Description: test path sensitivity just a bit | -Expected bug count: 1 | -
| - | ||
| Test Basic40 | -- - | -|
| Class: securibench.micro.basic.Basic40 | -Description: MultipartRequest test | -Expected bug count: 1 | -
| - | ||
| Test Basic41 | -- - | -|
| Class: securibench.micro.basic.Basic41 | -Description: use getInitParameter instead | -Expected bug count: 1 | -
| - | ||
| Test Basic42 | -- - | -|
| Class: securibench.micro.basic.Basic42 | -Description: use getInitParameterNames | -Expected bug count: 1 | -
| - | ||
| Test Basic5 | -- - | -|
| Class: securibench.micro.basic.Basic5 | -Description: moderately complex test of derived strings | -Expected bug count: 3 | -
| - | ||
| Test Basic6 | -- - | -|
| Class: securibench.micro.basic.Basic6 | -Description: complex test of derived strings | -Expected bug count: 1 | -
| - | ||
| Test Basic7 | -- - | -|
| Class: securibench.micro.basic.Basic7 | -Description: complex test of derived strings involving a string buffer | -Expected bug count: 1 | -
| - | ||
| Test Basic8 | -- - | -|
| Class: securibench.micro.basic.Basic8 | -Description: test of complex conditionals | -Expected bug count: 1 | -
| - | ||
| Test Basic9 | -- - | -|
| Class: securibench.micro.basic.Basic9 | -Description: chains of value assignments | -Expected bug count: 1 | -
| - - Package securibench.micro.collections - - | -||
| - | ||
| Test Collections1 | -- - | -|
| Class: securibench.micro.collections.Collections1 | -Description: simple collection deposit/retrieve | -Expected bug count: 1 | -
| - | ||
| Test Collections10 | -- - | -|
| Class: securibench.micro.collections.Collections10 | -Description: more complex collection copying | -Expected bug count: 0 | -
| - | ||
| Test Collections11 | -- - | -|
| Class: securibench.micro.collections.Collections11 | -Description: interprocedural collection passing | -Expected bug count: 1 | -
| - | ||
| Test Collections11b | -- - | -|
| Class: securibench.micro.collections.Collections11b | -Description: simple collection deposit/retrieve | -Expected bug count: 1 | -
| - | ||
| Test Collections12 | -- - | -|
| Class: securibench.micro.collections.Collections12 | -Description: collection copying through an array | -Expected bug count: 1 | -
| - | ||
| Test Collections13 | -- - | -|
| Class: securibench.micro.collections.Collections13 | -Description: more complex collection copying through an array | -Expected bug count: 1 | -
| - | ||
| Test Collections14 | -- - | -|
| Class: securibench.micro.collections.Collections14 | -Description: more complex collection copying through an array | -Expected bug count: 1 | -
| - | ||
| Test Collections2 | -- - | -|
| Class: securibench.micro.collections.Collections2 | -Description: collection deposit/retrieve, check for false positives | -Expected bug count: 1 | -
| - | ||
| Test Collections3 | -- - | -|
| Class: securibench.micro.collections.Collections3 | -Description: collection of collections | -Expected bug count: 2 | -
| - | ||
| Test Collections4 | -- - | -|
| Class: securibench.micro.collections.Collections4 | -Description: test of iterators | -Expected bug count: 1 | -
| - | ||
| Test Collections5 | -- - | -|
| Class: securibench.micro.collections.Collections5 | -Description: test of iterators | -Expected bug count: 1 | -
| - | ||
| Test Collections6 | -- - | -|
| Class: securibench.micro.collections.Collections6 | -Description: test of maps | -Expected bug count: 1 | -
| - | ||
| Test Collections7 | -- - | -|
| Class: securibench.micro.collections.Collections7 | -Description: test of map iterators | -Expected bug count: 1 | -
| - | ||
| Test Collections8 | -- - | -|
| Class: securibench.micro.collections.Collections8 | -Description: collection copying | -Expected bug count: 1 | -
| - | ||
| Test Collections9 | -- - | -|
| Class: securibench.micro.collections.Collections9 | -Description: more complex collection copying | -Expected bug count: 0 | -
| - - Package securibench.micro.datastructures - - | -||
| - | ||
| Test Datastructures1 | -- - | -|
| Class: securibench.micro.datastructures.Datastructures1 | -Description: simple test of field assignment | -Expected bug count: 1 | -
| - | ||
| Test Datastructures2 | -- - | -|
| Class: securibench.micro.datastructures.Datastructures2 | -Description: multiple objects of the same type | -Expected bug count: 1 | -
| - | ||
| Test Datastructures3 | -- - | -|
| Class: securibench.micro.datastructures.Datastructures3 | -Description: simple nexted data | -Expected bug count: 1 | -
| - | ||
| Test Datastructures4 | -- - | -|
| Class: securibench.micro.datastructures.Datastructures4 | -Description: simple nexted data (false positive) | -Expected bug count: 1 | -
| - | ||
| Test Datastructures5 | -- - | -|
| Class: securibench.micro.datastructures.Datastructures5 | -Description: nested data in a loop | -Expected bug count: 1 | -
| - | ||
| Test Datastructures6 | -- - | -|
| Class: securibench.micro.datastructures.Datastructures6 | -Description: nested data in a loop | -Expected bug count: 1 | -
| - - Package securibench.micro.factories - - | -||
| - | ||
| Test Factories1 | -- - | -|
| Class: securibench.micro.factories.Factories1 | -Description: simple factory problem with toLowerCase | -Expected bug count: 1 | -
| - | ||
| Test Factories2 | -- - | -|
| Class: securibench.micro.factories.Factories2 | -Description: simple factory problem with String.toString | -Expected bug count: 1 | -
| - | ||
| Test Factories3 | -- - | -|
| Class: securibench.micro.factories.Factories3 | -Description: factory problem with a string wrapper | -Expected bug count: 1 | -
| - - Package securibench.micro.inter - - | -||
| - | ||
| Test Inter1 | -- - | -|
| Class: securibench.micro.inter.Inter1 | -Description: simple id method call | -Expected bug count: 1 | -
| - | ||
| Test Inter10 | -- - | -|
| Class: securibench.micro.inter.Inter10 | -Description: more complex object sensitivity | -Expected bug count: 2 | -
| - | ||
| Test Inter11 | -- - | -|
| Class: securibench.micro.inter.Inter11 | -Description: object sensitivity and context sensitivity combined | -Expected bug count: 1 | -
| - | ||
| Test Inter12 | -- - | -|
| Class: securibench.micro.inter.Inter12 | -Description: collection as a static field | -Expected bug count: 1 | -
| - | ||
| Test Inter13 | -- - | -|
| Class: securibench.micro.inter.Inter13 | -Description: recursive case | -Expected bug count: 1 | -
| - | ||
| Test Inter14 | -- - | -|
| Class: securibench.micro.inter.Inter14 | -Description: interprocedural loop | -Expected bug count: 1 | -
| - | ||
| Test Inter2 | -- - | -|
| Class: securibench.micro.inter.Inter2 | -Description: simple id method call | -Expected bug count: 2 | -
| - | ||
| Test Inter3 | -- - | -|
| Class: securibench.micro.inter.Inter3 | -Description: chains of method calls | -Expected bug count: 1 | -
| - | ||
| Test Inter4 | -- - | -|
| Class: securibench.micro.inter.Inter4 | -Description: store stuff in a field | -Expected bug count: 1 | -
| - | ||
| Test Inter5 | -- - | -|
| Class: securibench.micro.inter.Inter5 | -Description: store stuff in a field | -Expected bug count: 1 | -
| - | ||
| Test Inter6 | -- - | -|
| Class: securibench.micro.inter.Inter6 | -Description: bug in class initializer | -Expected bug count: 1 | -
| - | ||
| Test Inter7 | -- - | -|
| Class: securibench.micro.inter.Inter7 | -Description: bug in class initializer | -Expected bug count: 1 | -
| - | ||
| Test Inter8 | -- - | -|
| Class: securibench.micro.inter.Inter8 | -Description: multi-level context sensitivity test | -Expected bug count: 1 | -
| - | ||
| Test Inter9 | -- - | -|
| Class: securibench.micro.inter.Inter9 | -Description: simple object sensitivity | -Expected bug count: 2 | -
| - - Package securibench.micro.pred - - | -||
| - | ||
| Test Pred1 | -- - | -|
| Class: securibench.micro.pred.Pred1 | -Description: simple if(false) test | -Expected bug count: 0 | -
| - | ||
| Test Pred2 | -- - | -|
| Class: securibench.micro.pred.Pred2 | -Description: simple correlated tests | -Expected bug count: 0 | -
| - | ||
| Test Pred3 | -- - | -|
| Class: securibench.micro.pred.Pred3 | -Description: simple correlated tests | -Expected bug count: 0 | -
| - | ||
| Test Pred4 | -- - | -|
| Class: securibench.micro.pred.Pred4 | -Description: correlated test with an int variable | -Expected bug count: 1 | -
| - | ||
| Test Pred5 | -- - | -|
| Class: securibench.micro.pred.Pred5 | -Description: correlated test with a complex conditional | -Expected bug count: 1 | -
| - | ||
| Test Pred6 | -- - | -|
| Class: securibench.micro.pred.Pred6 | -Description: correlated test with addition | -Expected bug count: 0 | -
| - | ||
| Test Pred7 | -- - | -|
| Class: securibench.micro.pred.Pred7 | -Description: correlated test with multiple variables | -Expected bug count: 0 | -
| - | ||
| Test Pred8 | -- - | -|
| Class: securibench.micro.pred.Pred8 | -Description: using an array element as in a predicate | -Expected bug count: 1 | -
| - | ||
| Test Pred9 | -- - | -|
| Class: securibench.micro.pred.Pred9 | -Description: using an array element as in a predicate | -Expected bug count: 1 | -
| - - Package securibench.micro.reflection - - | -||
| - | ||
| Test Refl1 | -- - | -|
| Class: securibench.micro.reflection.Refl1 | -Description: reflective call of a method | -Expected bug count: 1 | -
| - | ||
| Test Refl2 | -- - | -|
| Class: securibench.micro.reflection.Refl2 | -Description: reflectively access a field | -Expected bug count: 1 | -
| - | ||
| Test Refl3 | -- - | -|
| Class: securibench.micro.reflection.Refl3 | -Description: reflectively create a class and access its field | -Expected bug count: 1 | -
| - | ||
| Test Refl4 | -- - | -|
| Class: securibench.micro.reflection.Refl4 | -Description: bug in class initializer | -Expected bug count: 1 | -
| - - Package securibench.micro.sanitizers - - | -||
| - | ||
| Test Sanitizers1 | -- - | -|
| Class: securibench.micro.sanitizers.Sanitizers1 | -Description: simple sanitization check | -Expected bug count: 1 | -
| - | ||
| Test Sanitizers2 | -- - | -|
| Class: securibench.micro.sanitizers.Sanitizers2 | -Description: simple sanitization check | -Expected bug count: 0 | -
| - | ||
| Test Sanitizers3 | -- - | -|
| Class: securibench.micro.sanitizers.Sanitizers3 | -Description: safe redirect | -Expected bug count: 0 | -
| - | ||
| Test Sanitizers4 | -- - | -|
| Class: securibench.micro.sanitizers.Sanitizers4 | -Description: buggy sanitizer | -Expected bug count: 2 | -
| - | ||
| Test Sanitizers5 | -- - | -|
| Class: securibench.micro.sanitizers.Sanitizers5 | -Description: encode and then decode | -Expected bug count: 1 | -
| - | ||
| Test Sanitizers6 | -- - | -|
| Class: securibench.micro.sanitizers.Sanitizers6 | -Description: sanitizers for directory traversal | -Expected bug count: 0 | -
| - - Package securibench.micro.session - - | -||
| - | ||
| Test Session1 | -- - | -|
| Class: securibench.micro.session.Session1 | -Description: simple session test | -Expected bug count: 1 | -
| - | ||
| Test Session2 | -- - | -|
| Class: securibench.micro.session.Session2 | -Description: test of session false positives | -Expected bug count: 1 | -
| - | ||
| Test Session3 | -- - | -|
| Class: securibench.micro.session.Session3 | -Description: test of session enumeration | -Expected bug count: 1 | -
| - - Package securibench.micro.strong_updates - - | -||
| - | ||
| Test StrongUpdates1 | -- - | -|
| Class: securibench.micro.strong_updates.StrongUpdates1 | -Description: simple test of strong updates | -Expected bug count: 0 | -
| - | ||
| Test StrongUpdates2 | -- - | -|
| Class: securibench.micro.strong_updates.StrongUpdates2 | -Description: simple test of strong updates | -Expected bug count: 0 | -
| - | ||
| Test StrongUpdates3 | -- - | -|
| Class: securibench.micro.strong_updates.StrongUpdates3 | -Description: strong updates in data structures | -Expected bug count: 0 | -
| - | ||
| Test StrongUpdates4 | -- - | -|
| Class: securibench.micro.strong_updates.StrongUpdates4 | -Description: a more tricky test of when we can't assume a strong update with multiple variables that are not thread-local | -Expected bug count: 1 | -
| - | ||
| Test StrongUpdates5 | -- - | -|
| Class: securibench.micro.strong_updates.StrongUpdates5 | -Description: making a shared servlet field thread-local | -Expected bug count: 0 | -
-
-BasicTestCase.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-MicroTestCase.java
-
- |
- |
-
-01 /*
-
- |
-
- |
-
-Aliasing1.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Aliasing2.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Aliasing3.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Aliasing4.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Aliasing5.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Aliasing6.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Arrays1.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Arrays10.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Arrays2.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Arrays3.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Arrays4.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Arrays5.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Arrays6.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Arrays7.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Arrays8.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Arrays9.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Basic1.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Basic10.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Basic11.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Basic12.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Basic13.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Basic14.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Basic15.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Basic16.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Basic17.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Basic18.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Basic19.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Basic2.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Basic20.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Basic21.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Basic22.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Basic23.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Basic24.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Basic25.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Basic26.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Basic27.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Basic28.java
-
- |
- |
-
-001 /**
-
- |
-
- |
-
-Basic29.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Basic3.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Basic30.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Basic31.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Basic32.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Basic33.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Basic34.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Basic35.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Basic36.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Basic37.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Basic38.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Basic39.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Basic4.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Basic40.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Basic41.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Basic42.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Basic5.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Basic6.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Basic7.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Basic8.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Basic9.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Collections1.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Collections10.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Collections11.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Collections11b.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Collections12.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Collections13.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Collections14.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Collections2.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Collections3.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Collections4.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Collections5.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Collections6.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Collections7.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Collections8.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Collections9.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Datastructures1.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Datastructures2.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Datastructures3.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Datastructures4.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Datastructures5.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Datastructures6.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Factories1.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Factories2.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Factories3.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Inter1.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Inter10.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Inter11.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Inter12.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Inter13.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Inter14.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Inter2.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Inter3.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Inter4.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Inter5.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Inter6.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Inter7.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Inter8.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Inter9.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Pred1.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Pred2.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Pred3.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Pred4.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Pred5.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Pred6.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Pred7.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Pred8.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Pred9.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Refl1.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Refl2.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Refl3.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Refl4.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Sanitizers1.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Sanitizers2.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Sanitizers3.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Sanitizers4.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Sanitizers5.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Sanitizers6.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Session1.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Session2.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-Session3.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-StrongUpdates1.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-StrongUpdates2.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-StrongUpdates3.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-StrongUpdates4.java
-
- |
- |
-
-01 /**
-
- |
-
- |
-
-StrongUpdates5.java
-
- |
- |
-
-01 /**
-
- |
-
- |
| - - Package securibench.micro - - | -||
| - - Package securibench.micro.aliasing - - | -||
| - | ||
| Test Aliasing1 | -- - | -|
| Class: securibench.micro.aliasing.Aliasing1 | -Description: simple aliasing because of assignment | -Expected bug count: 1 | -
| - | ||
| Test Aliasing2 | -- - | -|
| Class: securibench.micro.aliasing.Aliasing2 | -Description: simple aliasing false positive | -Expected bug count: 1 | -
| - | ||
| Test Aliasing3 | -- - | -|
| Class: securibench.micro.aliasing.Aliasing3 | -Description: simple aliasing of an array element | -Expected bug count: 1 | -
| - | ||
| Test Aliasing4 | -- - | -|
| Class: securibench.micro.aliasing.Aliasing4 | -Description: simple aliasing with casts | -Expected bug count: 1 | -
| - | ||
| Test Aliasing5 | -- - | -|
| Class: securibench.micro.aliasing.Aliasing5 | -Description: interprocedural argument aliasing | -Expected bug count: 1 | -
| - | ||
| Test Aliasing6 | -- - | -|
| Class: securibench.micro.aliasing.Aliasing6 | -Description: aliasing with copy propagation | -Expected bug count: 7 | -
| - - Package securibench.micro.arrays - - | -||
| - | ||
| Test Arrays1 | -- - | -|
| Class: securibench.micro.arrays.Arrays1 | -Description: a simple array test | -Expected bug count: 1 | -
| - | ||
| Test Arrays10 | -- - | -|
| Class: securibench.micro.arrays.Arrays10 | -Description: comple multidimentional array test | -Expected bug count: 1 | -
| - | ||
| Test Arrays2 | -- - | -|
| Class: securibench.micro.arrays.Arrays2 | -Description: a more complex array test | -Expected bug count: 1 | -
| - | ||
| Test Arrays3 | -- - | -|
| Class: securibench.micro.arrays.Arrays3 | -Description: a more complex array test | -Expected bug count: 1 | -
| - | ||
| Test Arrays4 | -- - | -|
| Class: securibench.micro.arrays.Arrays4 | -Description: a test of array indeces | -Expected bug count: 1 | -
| - | ||
| Test Arrays5 | -- - | -|
| Class: securibench.micro.arrays.Arrays5 | -Description: strong updates to array elements | -Expected bug count: 0 | -
| - | ||
| Test Arrays6 | -- - | -|
| Class: securibench.micro.arrays.Arrays6 | -Description: strong updates to array elements | -Expected bug count: 1 | -
| - | ||
| Test Arrays7 | -- - | -|
| Class: securibench.micro.arrays.Arrays7 | -Description: test of array initializers | -Expected bug count: 1 | -
| - | ||
| Test Arrays8 | -- - | -|
| Class: securibench.micro.arrays.Arrays8 | -Description: test of array initializers | -Expected bug count: 1 | -
| - | ||
| Test Arrays9 | -- - | -|
| Class: securibench.micro.arrays.Arrays9 | -Description: multidimentional arrays | -Expected bug count: 1 | -
| - - Package securibench.micro.basic - - | -||
| - | ||
| Test Basic1 | -- - | -|
| Class: securibench.micro.basic.Basic1 | -Description: very simple XSS | -Expected bug count: 1 | -
| - | ||
| Test Basic10 | -- - | -|
| Class: securibench.micro.basic.Basic10 | -Description: chains of value assignments | -Expected bug count: 1 | -
| - | ||
| Test Basic11 | -- - | -|
| Class: securibench.micro.basic.Basic11 | -Description: a simple false positive because of two calls to String.toLowerCase | -Expected bug count: 2 | -
| - | ||
| Test Basic12 | -- - | -|
| Class: securibench.micro.basic.Basic12 | -Description: a simple conditional; both branches should be taken | -Expected bug count: 2 | -
| - | ||
| Test Basic13 | -- - | -|
| Class: securibench.micro.basic.Basic13 | -Description: use getInitParameter instead | -Expected bug count: 1 | -
| - | ||
| Test Basic14 | -- - | -|
| Class: securibench.micro.basic.Basic14 | -Description: use the servlet context and casts | -Expected bug count: 1 | -
| - | ||
| Test Basic15 | -- - | -|
| Class: securibench.micro.basic.Basic15 | -Description: test casts more exhaustively | -Expected bug count: 1 | -
| - | ||
| Test Basic16 | -- - | -|
| Class: securibench.micro.basic.Basic16 | -Description: simple heap-allocated data strucure | -Expected bug count: 1 | -
| - | ||
| Test Basic17 | -- - | -|
| Class: securibench.micro.basic.Basic17 | -Description: simple heap-allocated data strucure | -Expected bug count: 1 | -
| - | ||
| Test Basic18 | -- - | -|
| Class: securibench.micro.basic.Basic18 | -Description: protect agains simple loop unrolling | -Expected bug count: 1 | -
| - | ||
| Test Basic19 | -- - | -|
| Class: securibench.micro.basic.Basic19 | -Description: simple SQL injection with prepared statements | -Expected bug count: 1 | -
| - | ||
| Test Basic2 | -- - | -|
| Class: securibench.micro.basic.Basic2 | -Description: XSS combined with a simple conditional | -Expected bug count: 1 | -
| - | ||
| Test Basic20 | -- - | -|
| Class: securibench.micro.basic.Basic20 | -Description: simple SQL injection | -Expected bug count: 1 | -
| - | ||
| Test Basic21 | -- - | -|
| Class: securibench.micro.basic.Basic21 | -Description: SQL injection with less commonly used methods | -Expected bug count: 4 | -
| - | ||
| Test Basic22 | -- - | -|
| Class: securibench.micro.basic.Basic22 | -Description: basic path traversal | -Expected bug count: 1 | -
| - | ||
| Test Basic23 | -- - | -|
| Class: securibench.micro.basic.Basic23 | -Description: path traversal | -Expected bug count: 3 | -
| - | ||
| Test Basic24 | -- - | -|
| Class: securibench.micro.basic.Basic24 | -Description: unsafe redirect | -Expected bug count: 1 | -
| - | ||
| Test Basic25 | -- - | -|
| Class: securibench.micro.basic.Basic25 | -Description: test getParameterValues | -Expected bug count: 1 | -
| - | ||
| Test Basic26 | -- - | -|
| Class: securibench.micro.basic.Basic26 | -Description: test getParameterMap | -Expected bug count: 1 | -
| - | ||
| Test Basic27 | -- - | -|
| Class: securibench.micro.basic.Basic27 | -Description: test getParameterMap | -Expected bug count: 1 | -
| - | ||
| Test Basic28 | -- - | -|
| Class: securibench.micro.basic.Basic28 | -Description: complicated control flow | -Expected bug count: 2 | -
| - | ||
| Test Basic29 | -- - | -|
| Class: securibench.micro.basic.Basic29 | -Description: recursive data structures | -Expected bug count: 2 | -
| - | ||
| Test Basic3 | -- - | -|
| Class: securibench.micro.basic.Basic3 | -Description: simple derived string test | -Expected bug count: 1 | -
| - | ||
| Test Basic30 | -- - | -|
| Class: securibench.micro.basic.Basic30 | -Description: field sensitivity | -Expected bug count: 1 | -
| - | ||
| Test Basic31 | -- - | -|
| Class: securibench.micro.basic.Basic31 | -Description: values obtained from cookies | -Expected bug count: 2 | -
| - | ||
| Test Basic32 | -- - | -|
| Class: securibench.micro.basic.Basic32 | -Description: values obtained from headers | -Expected bug count: 1 | -
| - | ||
| Test Basic33 | -- - | -|
| Class: securibench.micro.basic.Basic33 | -Description: values obtained from headers | -Expected bug count: 1 | -
| - | ||
| Test Basic34 | -- - | -|
| Class: securibench.micro.basic.Basic34 | -Description: values obtained from headers | -Expected bug count: 2 | -
| - | ||
| Test Basic35 | -- - | -|
| Class: securibench.micro.basic.Basic35 | -Description: values obtained from HttpServletRequest | -Expected bug count: 6 | -
| - | ||
| Test Basic36 | -- - | -|
| Class: securibench.micro.basic.Basic36 | -Description: values obtained from HttpServletRequest input stream | -Expected bug count: 1 | -
| - | ||
| Test Basic37 | -- - | -|
| Class: securibench.micro.basic.Basic37 | -Description: StringTokenizer test | -Expected bug count: 1 | -
| - | ||
| Test Basic38 | -- - | -|
| Class: securibench.micro.basic.Basic38 | -Description: StringTokenizer test with a false positive | -Expected bug count: 1 | -
| - | ||
| Test Basic39 | -- - | -|
| Class: securibench.micro.basic.Basic39 | -Description: StringTokenizer test | -Expected bug count: 1 | -
| - | ||
| Test Basic4 | -- - | -|
| Class: securibench.micro.basic.Basic4 | -Description: test path sensitivity just a bit | -Expected bug count: 1 | -
| - | ||
| Test Basic40 | -- - | -|
| Class: securibench.micro.basic.Basic40 | -Description: MultipartRequest test | -Expected bug count: 1 | -
| - | ||
| Test Basic41 | -- - | -|
| Class: securibench.micro.basic.Basic41 | -Description: use getInitParameter instead | -Expected bug count: 1 | -
| - | ||
| Test Basic42 | -- - | -|
| Class: securibench.micro.basic.Basic42 | -Description: use getInitParameterNames | -Expected bug count: 1 | -
| - | ||
| Test Basic5 | -- - | -|
| Class: securibench.micro.basic.Basic5 | -Description: moderately complex test of derived strings | -Expected bug count: 3 | -
| - | ||
| Test Basic6 | -- - | -|
| Class: securibench.micro.basic.Basic6 | -Description: complex test of derived strings | -Expected bug count: 1 | -
| - | ||
| Test Basic7 | -- - | -|
| Class: securibench.micro.basic.Basic7 | -Description: complex test of derived strings involving a string buffer | -Expected bug count: 1 | -
| - | ||
| Test Basic8 | -- - | -|
| Class: securibench.micro.basic.Basic8 | -Description: test of complex conditionals | -Expected bug count: 1 | -
| - | ||
| Test Basic9 | -- - | -|
| Class: securibench.micro.basic.Basic9 | -Description: chains of value assignments | -Expected bug count: 1 | -
| - - Package securibench.micro.collections - - | -||
| - | ||
| Test Collections1 | -- - | -|
| Class: securibench.micro.collections.Collections1 | -Description: simple collection deposit/retrieve | -Expected bug count: 1 | -
| - | ||
| Test Collections10 | -- - | -|
| Class: securibench.micro.collections.Collections10 | -Description: more complex collection copying | -Expected bug count: 0 | -
| - | ||
| Test Collections11 | -- - | -|
| Class: securibench.micro.collections.Collections11 | -Description: interprocedural collection passing | -Expected bug count: 1 | -
| - | ||
| Test Collections11b | -- - | -|
| Class: securibench.micro.collections.Collections11b | -Description: simple collection deposit/retrieve | -Expected bug count: 1 | -
| - | ||
| Test Collections12 | -- - | -|
| Class: securibench.micro.collections.Collections12 | -Description: collection copying through an array | -Expected bug count: 1 | -
| - | ||
| Test Collections13 | -- - | -|
| Class: securibench.micro.collections.Collections13 | -Description: more complex collection copying through an array | -Expected bug count: 1 | -
| - | ||
| Test Collections14 | -- - | -|
| Class: securibench.micro.collections.Collections14 | -Description: more complex collection copying through an array | -Expected bug count: 1 | -
| - | ||
| Test Collections2 | -- - | -|
| Class: securibench.micro.collections.Collections2 | -Description: collection deposit/retrieve, check for false positives | -Expected bug count: 1 | -
| - | ||
| Test Collections3 | -- - | -|
| Class: securibench.micro.collections.Collections3 | -Description: collection of collections | -Expected bug count: 2 | -
| - | ||
| Test Collections4 | -- - | -|
| Class: securibench.micro.collections.Collections4 | -Description: test of iterators | -Expected bug count: 1 | -
| - | ||
| Test Collections5 | -- - | -|
| Class: securibench.micro.collections.Collections5 | -Description: test of iterators | -Expected bug count: 1 | -
| - | ||
| Test Collections6 | -- - | -|
| Class: securibench.micro.collections.Collections6 | -Description: test of maps | -Expected bug count: 1 | -
| - | ||
| Test Collections7 | -- - | -|
| Class: securibench.micro.collections.Collections7 | -Description: test of map iterators | -Expected bug count: 1 | -
| - | ||
| Test Collections8 | -- - | -|
| Class: securibench.micro.collections.Collections8 | -Description: collection copying | -Expected bug count: 1 | -
| - | ||
| Test Collections9 | -- - | -|
| Class: securibench.micro.collections.Collections9 | -Description: more complex collection copying | -Expected bug count: 0 | -
| - - Package securibench.micro.datastructures - - | -||
| - | ||
| Test Datastructures1 | -- - | -|
| Class: securibench.micro.datastructures.Datastructures1 | -Description: simple test of field assignment | -Expected bug count: 1 | -
| - | ||
| Test Datastructures2 | -- - | -|
| Class: securibench.micro.datastructures.Datastructures2 | -Description: multiple objects of the same type | -Expected bug count: 1 | -
| - | ||
| Test Datastructures3 | -- - | -|
| Class: securibench.micro.datastructures.Datastructures3 | -Description: simple nexted data | -Expected bug count: 1 | -
| - | ||
| Test Datastructures4 | -- - | -|
| Class: securibench.micro.datastructures.Datastructures4 | -Description: simple nexted data (false positive) | -Expected bug count: 1 | -
| - | ||
| Test Datastructures5 | -- - | -|
| Class: securibench.micro.datastructures.Datastructures5 | -Description: nested data in a loop | -Expected bug count: 1 | -
| - | ||
| Test Datastructures6 | -- - | -|
| Class: securibench.micro.datastructures.Datastructures6 | -Description: nested data in a loop | -Expected bug count: 1 | -
| - - Package securibench.micro.factories - - | -||
| - | ||
| Test Factories1 | -- - | -|
| Class: securibench.micro.factories.Factories1 | -Description: simple factory problem with toLowerCase | -Expected bug count: 1 | -
| - | ||
| Test Factories2 | -- - | -|
| Class: securibench.micro.factories.Factories2 | -Description: simple factory problem with String.toString | -Expected bug count: 1 | -
| - | ||
| Test Factories3 | -- - | -|
| Class: securibench.micro.factories.Factories3 | -Description: factory problem with a string wrapper | -Expected bug count: 1 | -
| - - Package securibench.micro.inter - - | -||
| - | ||
| Test Inter1 | -- - | -|
| Class: securibench.micro.inter.Inter1 | -Description: simple id method call | -Expected bug count: 1 | -
| - | ||
| Test Inter10 | -- - | -|
| Class: securibench.micro.inter.Inter10 | -Description: more complex object sensitivity | -Expected bug count: 2 | -
| - | ||
| Test Inter11 | -- - | -|
| Class: securibench.micro.inter.Inter11 | -Description: object sensitivity and context sensitivity combined | -Expected bug count: 1 | -
| - | ||
| Test Inter12 | -- - | -|
| Class: securibench.micro.inter.Inter12 | -Description: collection as a static field | -Expected bug count: 1 | -
| - | ||
| Test Inter13 | -- - | -|
| Class: securibench.micro.inter.Inter13 | -Description: recursive case | -Expected bug count: 1 | -
| - | ||
| Test Inter14 | -- - | -|
| Class: securibench.micro.inter.Inter14 | -Description: interprocedural loop | -Expected bug count: 1 | -
| - | ||
| Test Inter2 | -- - | -|
| Class: securibench.micro.inter.Inter2 | -Description: simple id method call | -Expected bug count: 2 | -
| - | ||
| Test Inter3 | -- - | -|
| Class: securibench.micro.inter.Inter3 | -Description: chains of method calls | -Expected bug count: 1 | -
| - | ||
| Test Inter4 | -- - | -|
| Class: securibench.micro.inter.Inter4 | -Description: store stuff in a field | -Expected bug count: 1 | -
| - | ||
| Test Inter5 | -- - | -|
| Class: securibench.micro.inter.Inter5 | -Description: store stuff in a field | -Expected bug count: 1 | -
| - | ||
| Test Inter6 | -- - | -|
| Class: securibench.micro.inter.Inter6 | -Description: bug in class initializer | -Expected bug count: 1 | -
| - | ||
| Test Inter7 | -- - | -|
| Class: securibench.micro.inter.Inter7 | -Description: bug in class initializer | -Expected bug count: 1 | -
| - | ||
| Test Inter8 | -- - | -|
| Class: securibench.micro.inter.Inter8 | -Description: multi-level context sensitivity test | -Expected bug count: 1 | -
| - | ||
| Test Inter9 | -- - | -|
| Class: securibench.micro.inter.Inter9 | -Description: simple object sensitivity | -Expected bug count: 2 | -
| - - Package securibench.micro.pred - - | -||
| - | ||
| Test Pred1 | -- - | -|
| Class: securibench.micro.pred.Pred1 | -Description: simple if(false) test | -Expected bug count: 0 | -
| - | ||
| Test Pred2 | -- - | -|
| Class: securibench.micro.pred.Pred2 | -Description: simple correlated tests | -Expected bug count: 0 | -
| - | ||
| Test Pred3 | -- - | -|
| Class: securibench.micro.pred.Pred3 | -Description: simple correlated tests | -Expected bug count: 0 | -
| - | ||
| Test Pred4 | -- - | -|
| Class: securibench.micro.pred.Pred4 | -Description: correlated test with an int variable | -Expected bug count: 1 | -
| - | ||
| Test Pred5 | -- - | -|
| Class: securibench.micro.pred.Pred5 | -Description: correlated test with a complex conditional | -Expected bug count: 1 | -
| - | ||
| Test Pred6 | -- - | -|
| Class: securibench.micro.pred.Pred6 | -Description: correlated test with addition | -Expected bug count: 0 | -
| - | ||
| Test Pred7 | -- - | -|
| Class: securibench.micro.pred.Pred7 | -Description: correlated test with multiple variables | -Expected bug count: 0 | -
| - | ||
| Test Pred8 | -- - | -|
| Class: securibench.micro.pred.Pred8 | -Description: using an array element as in a predicate | -Expected bug count: 1 | -
| - | ||
| Test Pred9 | -- - | -|
| Class: securibench.micro.pred.Pred9 | -Description: using an array element as in a predicate | -Expected bug count: 1 | -
| - - Package securibench.micro.reflection - - | -||
| - | ||
| Test Refl1 | -- - | -|
| Class: securibench.micro.reflection.Refl1 | -Description: reflective call of a method | -Expected bug count: 1 | -
| - | ||
| Test Refl2 | -- - | -|
| Class: securibench.micro.reflection.Refl2 | -Description: reflectively access a field | -Expected bug count: 1 | -
| - | ||
| Test Refl3 | -- - | -|
| Class: securibench.micro.reflection.Refl3 | -Description: reflectively create a class and access its field | -Expected bug count: 1 | -
| - | ||
| Test Refl4 | -- - | -|
| Class: securibench.micro.reflection.Refl4 | -Description: bug in class initializer | -Expected bug count: 1 | -
| - - Package securibench.micro.sanitizers - - | -||
| - | ||
| Test Sanitizers1 | -- - | -|
| Class: securibench.micro.sanitizers.Sanitizers1 | -Description: simple sanitization check | -Expected bug count: 1 | -
| - | ||
| Test Sanitizers2 | -- - | -|
| Class: securibench.micro.sanitizers.Sanitizers2 | -Description: simple sanitization check | -Expected bug count: 0 | -
| - | ||
| Test Sanitizers3 | -- - | -|
| Class: securibench.micro.sanitizers.Sanitizers3 | -Description: safe redirect | -Expected bug count: 0 | -
| - | ||
| Test Sanitizers4 | -- - | -|
| Class: securibench.micro.sanitizers.Sanitizers4 | -Description: buggy sanitizer | -Expected bug count: 2 | -
| - | ||
| Test Sanitizers5 | -- - | -|
| Class: securibench.micro.sanitizers.Sanitizers5 | -Description: encode and then decode | -Expected bug count: 1 | -
| - | ||
| Test Sanitizers6 | -- - | -|
| Class: securibench.micro.sanitizers.Sanitizers6 | -Description: sanitizers for directory traversal | -Expected bug count: 0 | -
| - - Package securibench.micro.session - - | -||
| - | ||
| Test Session1 | -- - | -|
| Class: securibench.micro.session.Session1 | -Description: simple session test | -Expected bug count: 1 | -
| - | ||
| Test Session2 | -- - | -|
| Class: securibench.micro.session.Session2 | -Description: test of session false positives | -Expected bug count: 1 | -
| - | ||
| Test Session3 | -- - | -|
| Class: securibench.micro.session.Session3 | -Description: test of session enumeration | -Expected bug count: 1 | -
| - - Package securibench.micro.strong_updates - - | -||
| - | ||
| Test StrongUpdates1 | -- - | -|
| Class: securibench.micro.strong_updates.StrongUpdates1 | -Description: simple test of strong updates | -Expected bug count: 0 | -
| - | ||
| Test StrongUpdates2 | -- - | -|
| Class: securibench.micro.strong_updates.StrongUpdates2 | -Description: simple test of strong updates | -Expected bug count: 0 | -
| - | ||
| Test StrongUpdates3 | -- - | -|
| Class: securibench.micro.strong_updates.StrongUpdates3 | -Description: strong updates in data structures | -Expected bug count: 0 | -
| - | ||
| Test StrongUpdates4 | -- - | -|
| Class: securibench.micro.strong_updates.StrongUpdates4 | -Description: a more tricky test of when we can't assume a strong update with multiple variables that are not thread-local | -Expected bug count: 1 | -
| - | ||
| Test StrongUpdates5 | -- - | -|
| Class: securibench.micro.strong_updates.StrongUpdates5 | -Description: making a shared servlet field thread-local | -Expected bug count: 0 | -