Skip to main content

NOTICE: Due to a lapse in annual appropriations, most of this website is not being updated. Learn more.

Form submissions will still be accepted but will not receive responses at this time. Sections of this site for programs using non-appropriated funds (such as NVLAP) or those that are excepted from the shutdown (such as CHIPS and NVD) will continue to be updated.

U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

The Juliet 1.1 C/C++ and Java Test Suite

Published

Author(s)

Frederick E. Boland Jr., Paul E. Black

Abstract

The Juliet Test Suite 1.1 is a collection of over 81,000 synthetic C/C++ and Java programs with known flaws. These programs are useful as test cases for testing the effectiveness of static analyzers and other software assurance tools, and are in the public domain. This article describes the structure of Juliet and the test cases comprising it. The cases cover 181 different Common Weakness Enumeration (CWE) entries. Each case consists of a page or two of source code with a specific flaw embedded in a control- or data-flow variant, and most include similar, but non-flawed, code to test tool discrimination. The C/C++ or Java portion of the test suite may be downloaded at http://samate.nist.gov/SRD/testsuite.php.
Citation
Computer (IEEE Computer)
Volume
45
Issue
10

Keywords

software assurance, source code static analysis, Juliet test suite, CWE, SAMATE

Citation

Boland Jr., F. and Black, P. (2012), The Juliet 1.1 C/C++ and Java Test Suite, Computer (IEEE Computer), [online], https://doi.org/10.1109/MC.2012.345 (Accessed October 6, 2025)

Issues

If you have any questions about this publication or are having problems accessing it, please contact [email protected].

Created September 30, 2012, Updated October 12, 2021
Was this page helpful?