Simon is going through some of Heather’s code and notices an issue. What issue did Simon find
in the following code?
void f4(void * arg, size_t len)
{
char *buff = new char[100];
C *ptr = new C;
memcpy(buff, arg, len);
ptr->vf();
return;
}

Lori is creating a login page using Java on one of her websites with the following code. What
vulnerability or issue is the code susceptible to?
conn = pool.getConnection();
String sql = “select * from user where
username=’” + “’ and password=’” + password +
“’”;
stmt = conn.createstatement();
rs = stmt.executeQuery(sql);
if (rs.next())
{
loggedIn = true;
out.println(“Successfully logged in”);
}
else
{
out.println(“Username and/or password not valid”);
}

Malory is creating a webpage in PHP where users will have to logon to gain access to certain
areas of the site. Malory is concerned that malicious users might try to exploit her site, so she
decides to use the following code to prevent some attacks. What is Malory trying to prevent here?
$username = addslashes($_POST[“username”]);
$password = addslashes($_POST[“password”]);

Tyler is in the applicaion testing phase of a particular project. He has decided to use the White Box
testing method. Tyler has made a number of changes to his code after some initial tests found
some bugs. Tyler now needs to test the code with those changes in place.
What type of testing is Tyler getting ready to perform?