Program: 26411
Project: 26411
Buggy source:
public AttackXss(AttackWorkEntry work){
  super(work);
  attackData=new LinkedList<AttackData>();
  String indicator;
  indicator=XssIndicator.getInstance().getIndicator();
  attackData.add(new AttackData(0,indicator,indicator,AttackData.AttackType.INFO));
  attackData.add(new AttackData(1,indicator + "String_Node_Str",indicator + "String_Node_Str",AttackData.AttackType.VULN));
  attackData.add(new AttackData(2,indicator + "String_Node_Str",indicator + "String_Node_Str",AttackData.AttackType.VULN));
  attackData.add(new AttackData(3,indicator + "String_Node_Str",indicator + "String_Node_Str",AttackData.AttackType.VULN));
  attackData.add(new AttackData(4,indicator + "String_Node_Str",indicator + "String_Node_Str",AttackData.AttackType.VULN));
  attackData.add(new AttackData(5,indicator + "String_Node_Str",indicator + "String_Node_Str",AttackData.AttackType.VULN));
  attackData.add(new AttackData(6,indicator + "String_Node_Str",indicator + "String_Node_Str",AttackData.AttackType.VULN));
  attackData.add(new AttackData(7,indicator + "String_Node_Str",indicator + "String_Node_Str",AttackData.AttackType.VULN));
  attackData.add(new AttackData(8,indicator + "String_Node_Str",indicator + "String_Node_Str",AttackData.AttackType.VULN));
  attackData.add(new AttackData(9,indicator + "String_Node_Str",indicator + "String_Node_Str",AttackData.AttackType.VULN));
  attackData.add(new AttackData(10,indicator + "String_Node_Str",indicator + "String_Node_Str",AttackData.AttackType.VULN));
  attackData.add(new AttackData(11,indicator + "String_Node_Str",indicator + "String_Node_Str",AttackData.AttackType.VULN));
  attackData.add(new AttackData(12,indicator + "String_Node_Str",indicator + "String_Node_Str",AttackData.AttackType.VULN));
  attackData.add(new AttackData(13,indicator + "String_Node_Str",indicator + "String_Node_Str",AttackData.AttackType.VULN));
  attackData.add(new AttackData(14,indicator + "String_Node_Str",indicator + "String_Node_Str",AttackData.AttackType.VULN));
}

Fixed version (ground truth):
public AttackXss(AttackWorkEntry work){
  super(work);
  attackData=new LinkedList<AttackData>();
  String indicator;
  indicator=XssIndicator.getInstance().getIndicator();
  attackData.add(new AttackData(0,indicator,indicator,AttackData.AttackType.INFO));
  attackData.add(new AttackData(1,indicator + "String_Node_Str",indicator + "String_Node_Str",AttackData.AttackType.VULN));
  attackData.add(new AttackData(2,indicator + "String_Node_Str",indicator + "String_Node_Str",AttackData.AttackType.VULN));
  attackData.add(new AttackData(3,indicator + "String_Node_Str",indicator + "String_Node_Str",AttackData.AttackType.VULN));
  attackData.add(new AttackData(4,indicator + "String_Node_Str",indicator + "String_Node_Str",AttackData.AttackType.VULN));
  attackData.add(new AttackData(5,indicator + "String_Node_Str",indicator + "String_Node_Str",AttackData.AttackType.VULN));
  attackData.add(new AttackData(6,indicator + "String_Node_Str",indicator + "String_Node_Str",AttackData.AttackType.VULN));
  attackData.add(new AttackData(7,indicator + "String_Node_Str",indicator + "String_Node_Str",AttackData.AttackType.VULN));
  attackData.add(new AttackData(8,indicator + "String_Node_Str",indicator + "String_Node_Str",AttackData.AttackType.VULN));
  attackData.add(new AttackData(9,indicator + "String_Node_Str",indicator + "String_Node_Str",AttackData.AttackType.VULN));
  attackData.add(new AttackData(10,indicator + "String_Node_Str",indicator + "String_Node_Str",AttackData.AttackType.VULN));
  attackData.add(new AttackData(11,indicator + "String_Node_Str",indicator + "String_Node_Str",AttackData.AttackType.VULN));
}