/* TEMPLATE GENERATED TESTCASE FILE
Filename: CWE114_Process_Control__basic_01.java
Label Definition File: CWE114_Process_Control__basic.label.xml
Template File: point-flaw-01.tmpl.java
*/
/*
* @description
* CWE: 114 Process Control
* Sinks:
*    GoodSink: use System.load() to load a library
*    BadSink : use System.loadLibrary() to load a library
* Flow Variant: 01 Baseline
*
* */





public class CWE114_Process_Control__basic_01 extends AbstractTestCase
{
    public void bad() throws Throwable
    {

        String libraryName = "test.dll";

        /* FLAW: Attempt to load a library with System.loadLibrary() without
         * the full path to the library. */
        System.loadLibrary(libraryName);

    }

    public void good() throws Throwable
    {
        good1();
    }

    private void good1() throws Throwable
    {

        String root;
        String libraryName = "test.dll";

        if(System.getProperty("os.name").toLowerCase().indexOf("win") >= 0)
        {
            /* running on Windows */
            root = "C:\\libs\\";
        }
        else
        {
            /* running on non-Windows */
            root = "/home/user/libs/";
        }

        /* FIX: Use System.load() which allows you to specify a full path to the library */
        System.load(root + libraryName);

    }

    /* Below is the main(). It is only used when building this testcase on
     * its own for testing or for building a binary to use in testing binary
     * analysis tools. It is not used when compiling all the testcases as one
     * application, which is how source code analysis tools are tested.
     */
    public static void main(String[] args) throws ClassNotFoundException,
           InstantiationException, IllegalAccessException
    {
        mainFromParent(args);
    }
}

