TABLE OF CONTENTS Prototype: Access(path, mode)
Summary: This function is used to test the accessibility of a file.
Description: This function is used to test for the availability of a file. The function requires two input arguments: the path to the file and the mode in which to access it. The function tests the permissions of the file compared to the requested mode. The function returns a 0 if access is not allowed, it returns a 1 if the file is accessible.
Risk: Ensure that either the application logic or human users are limited to the files that require analysis. Attackers could potentially leverage this type of functionality while attempting to compromise a specific file.
Impact: Low
Prototype: ArrayInsertAt(array, position, value)
Summary: This function inserts an element into an array.
Description: The function attempts to insert an element into an array at a given position. The function has three input variables: the array, the position, and the new element. The function will return TRUE if successful, and FALSE if not. The function will recalculate the indexing, as well. Inserting an element at an interior position will increase the position for all remaining elements in the array.
Risk: Elements in an array are common targets of SQL injection and manipulation attacks in addition to cross-site scripting (CSS/XSS) attacks. These data elements are commonly stored and allowed to pass through weakly vetted input streams and during analysis within the program are executed thereby potentially putting additional data at risk.
