slither/tests/arbitrary_send.sol

contract Test{

    address destination;

    mapping (address => uint) balances;

    constructor(){
        balances[msg.sender] = 0;
    }

    function direct() public{
        msg.sender.send(address(this).balance);
    }

    function init() public{
        destination = msg.sender;
    }

    function indirect() public{
        destination.send(address(this).balance);
    }

    // these are legitimate calls
    // and should not be detected
    function repay() payable public{
        msg.sender.transfer(msg.value);
    }

    function withdraw() public{
        uint val = balances[msg.sender];
        msg.sender.send(val);
    }

    function buy() payable public{
        uint value_send = msg.value;
        uint value_spent = 0 ; // simulate a buy of tokens
        uint remaining = value_send - value_spent;
        msg.sender.send(remaining);
}

}