Creating test case using base program. Added an environment variable read to get a filename to read in the file contents using an fread operation within the function Completed injection. UNSPECIFIED UNSPECIFIED $SS_TC_ROOT/$SS_TC_INSTALL/bin/grep ./configure --prefix="$SS_TC_ROOT/$SS_TC_INSTALL" --exec-prefix="$SS_TC_ROOT/$SS_TC_INSTALL" --with-included-regex make V=1 CC="$SS_CC" CCLD="$SS_LNK" make V=1 install CC="$SS_CC" CCLD="$SS_LNK" all words beginning with e or x, case sensitive Create a function pointer on the stack. If the input length is not equal to 10, set the function pointer to a function. Try to use the function pointer. This will seg fault if the input length is exactly 10. NONE /opt/stonesoup/workspace/testData/eozoic_kullervo/ijma_helldog.txt AAAAAAAAAAA $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 ^[ex] input/dict.txt STDOUT-01 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-01/std-out.txt DOES_NOT_RETURN CONTROLLED_EXIT find BIRMINGHAM, ignore case, recursive Create a function pointer on the stack. If the input length is not equal to 10, set the function pointer to a function. Try to use the function pointer. This will seg fault if the input length is exactly 10. NONE /opt/stonesoup/workspace/testData/eozoic_kullervo/ijma_helldog.txt 12345 Hello world! $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 -r -i BIRMINGHAM input/zip/ STDOUT-02 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-02/std-out.txt DOES_NOT_RETURN CONTROLLED_EXIT read extented regular expressions from file Create a function pointer on the stack. If the input length is not equal to 10, set the function pointer to a function. Try to use the function pointer. This will seg fault if the input length is exactly 10. NONE /opt/stonesoup/workspace/testData/eozoic_kullervo/ijma_helldog.txt This string does not have 10 characters $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 -E -f input/grep-good-03-expr.txt input/mktsymbols.txt STDOUT-03 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-03/std-out.txt DOES_NOT_RETURN CONTROLLED_EXIT search for entire words matching a specific pattern Create a function pointer on the stack. If the input length is not equal to 10, set the function pointer to a function. Try to use the function pointer. This will seg fault if the input length is exactly 10. NONE /opt/stonesoup/workspace/testData/eozoic_kullervo/ijma_helldog.txt AAAAAAAAAAA $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 -w -f input/grep-good-04-expr.txt input/mktsymbols.txt STDOUT-04 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-04/std-out.txt DOES_NOT_RETURN CONTROLLED_EXIT use mmap(), find NASDAQ in file Create a function pointer on the stack. If the input length is not equal to 10, set the function pointer to a function. Try to use the function pointer. This will seg fault if the input length is exactly 10. NONE /opt/stonesoup/workspace/testData/eozoic_kullervo/ijma_helldog.txt 12345 Hello world! $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 --mmap NASDAQ input/mktsymbols.txt STDOUT-05 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-05/std-out.txt DOES_NOT_RETURN CONTROLLED_EXIT match lines not containing NASDAQ, ignore case, count Create a function pointer on the stack. If the input length is not equal to 10, set the function pointer to a function. Try to use the function pointer. This will seg fault if the input length is exactly 10. NONE /opt/stonesoup/workspace/testData/eozoic_kullervo/ijma_helldog.txt This string does not have 10 characters $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 -v -i -c NASDAQ input/mktsymbols.txt STDOUT-06 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-06/std-out.txt DOES_NOT_RETURN CONTROLLED_EXIT grep stdin (a device), match words beginning w/ D, P, or Z, redirect file into stdin Create a function pointer on the stack. If the input length is not equal to 10, set the function pointer to a function. Try to use the function pointer. This will seg fault if the input length is exactly 10. NONE /opt/stonesoup/workspace/testData/eozoic_kullervo/ijma_helldog.txt AAAAAAAAAAA $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 -D read -e ^[DPZ] /dev/stdin < input/mktsymbols.txt STDOUT-07 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-07/std-out.txt DOES_NOT_RETURN CONTROLLED_EXIT extended grep, print number of lines of context Create a function pointer on the stack. If the input length is not equal to 10, set the function pointer to a function. Try to use the function pointer. This will seg fault if the input length is exactly 10. NONE /opt/stonesoup/workspace/testData/eozoic_kullervo/ijma_helldog.txt 12345 Hello world! $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 -E -C 15 ^[BRT] input/mktsymbols.txt STDOUT-08 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-08/std-out.txt DOES_NOT_RETURN CONTROLLED_EXIT lines not beginning w/ B, R or T Create a function pointer on the stack. If the input length is not equal to 10, set the function pointer to a function. Try to use the function pointer. This will seg fault if the input length is exactly 10. NONE /opt/stonesoup/workspace/testData/eozoic_kullervo/ijma_helldog.txt This string does not have 10 characters $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 -v ^[BRT] input/mktsymbols.txt STDOUT-09 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-09/std-out.txt DOES_NOT_RETURN CONTROLLED_EXIT count lines not beginning w/ B, R or T Create a function pointer on the stack. If the input length is not equal to 10, set the function pointer to a function. Try to use the function pointer. This will seg fault if the input length is exactly 10. NONE /opt/stonesoup/workspace/testData/eozoic_kullervo/ijma_helldog.txt AAAAAAAAAAA $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 -c -v ^[BRT] input/mktsymbols.txt STDOUT-10 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-10/std-out.txt DOES_NOT_RETURN CONTROLLED_EXIT Create a function pointer on the stack. If the input length is not equal to 10, set the function pointer to a function. Try to use the function pointer. This will seg fault if the input length is exactly 10. DOS_UNCONTROLLED_EXIT /opt/stonesoup/workspace/testData/eozoic_kullervo/ijma_helldog.txt 0123456789 $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 -r -i BIRMINGHAM input/zip/ weakness_started_qy8vekYJg0Sfkkch8L0B AND ((NOT PERFORMER AND (segfault_code_7dNLnpjE7A OR segfault_code_5lkiqAYb73 OR segfault_code_6DhBbr6ISO OR segfault_code_V8ZFdjNkKG OR segfault_code_s9HMdA51qu OR segfault_msg_TyYxV7Xgqb OR illegal_inst_msg_c3Ui8Ebf4z OR segfault_illegal_inst_iIxW6zjdC0 OR segfault_illegal_return_iraPFRsLaw) AND NOT timeout_uHg6jGBSCW) or (PERFORMER AND NOT ((segfault_code_7dNLnpjE7A OR segfault_code_5lkiqAYb73 OR segfault_code_6DhBbr6ISO OR segfault_code_V8ZFdjNkKG OR segfault_code_s9HMdA51qu OR segfault_msg_TyYxV7Xgqb OR illegal_inst_msg_c3Ui8Ebf4z OR segfault_illegal_inst_iIxW6zjdC0 OR segfault_illegal_return_iraPFRsLaw) OR timeout_uHg6jGBSCW))) (NOT PERFORMER AND (segfault_code_7dNLnpjE7A OR segfault_code_5lkiqAYb73 OR segfault_code_6DhBbr6ISO OR segfault_code_V8ZFdjNkKG OR segfault_code_s9HMdA51qu OR segfault_msg_TyYxV7Xgqb OR illegal_inst_msg_c3Ui8Ebf4z OR segfault_illegal_inst_iIxW6zjdC0 OR segfault_illegal_return_iraPFRsLaw) AND NOT timeout_uHg6jGBSCW) or (PERFORMER AND NOT ((segfault_code_7dNLnpjE7A OR segfault_code_5lkiqAYb73 OR segfault_code_6DhBbr6ISO OR segfault_code_V8ZFdjNkKG OR segfault_code_s9HMdA51qu OR segfault_msg_TyYxV7Xgqb OR illegal_inst_msg_c3Ui8Ebf4z OR segfault_illegal_inst_iIxW6zjdC0 OR segfault_illegal_return_iraPFRsLaw) OR timeout_uHg6jGBSCW)) DOES_NOT_RETURN CONTROLLED_EXIT CONTINUED_EXECUTION None 132 None 134 None 135 None 136 None 139 None Segmentation fault None Illegal instruction None Illegal instruction None 132 None stonesoup_trace:weakness_start Create a function pointer on the stack. If the input length is not equal to 10, set the function pointer to a function. Try to use the function pointer. This will seg fault if the input length is exactly 10. DOS_UNCONTROLLED_EXIT /opt/stonesoup/workspace/testData/eozoic_kullervo/ijma_helldog.txt 10 chars.. $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 -c -v ^[BRT] input/mktsymbols.txt weakness_started_3C3RgIcV3IFqqkhCbFJG AND ((NOT PERFORMER AND (segfault_code_pVAXJEhlKN OR segfault_code_VG5tzUoaeV OR segfault_code_UfSuftvvei OR segfault_code_pMhFeVdeKJ OR segfault_code_XnKeKLBGhv OR segfault_msg_idwloNrhp3 OR illegal_inst_msg_gsRetTe9sr OR segfault_illegal_inst_Z87W40gMgG OR segfault_illegal_return_TxecbIeLII) AND NOT timeout_alhaIRD21E) or (PERFORMER AND NOT ((segfault_code_pVAXJEhlKN OR segfault_code_VG5tzUoaeV OR segfault_code_UfSuftvvei OR segfault_code_pMhFeVdeKJ OR segfault_code_XnKeKLBGhv OR segfault_msg_idwloNrhp3 OR illegal_inst_msg_gsRetTe9sr OR segfault_illegal_inst_Z87W40gMgG OR segfault_illegal_return_TxecbIeLII) OR timeout_alhaIRD21E))) (NOT PERFORMER AND (segfault_code_pVAXJEhlKN OR segfault_code_VG5tzUoaeV OR segfault_code_UfSuftvvei OR segfault_code_pMhFeVdeKJ OR segfault_code_XnKeKLBGhv OR segfault_msg_idwloNrhp3 OR illegal_inst_msg_gsRetTe9sr OR segfault_illegal_inst_Z87W40gMgG OR segfault_illegal_return_TxecbIeLII) AND NOT timeout_alhaIRD21E) or (PERFORMER AND NOT ((segfault_code_pVAXJEhlKN OR segfault_code_VG5tzUoaeV OR segfault_code_UfSuftvvei OR segfault_code_pMhFeVdeKJ OR segfault_code_XnKeKLBGhv OR segfault_msg_idwloNrhp3 OR illegal_inst_msg_gsRetTe9sr OR segfault_illegal_inst_Z87W40gMgG OR segfault_illegal_return_TxecbIeLII) OR timeout_alhaIRD21E)) DOES_NOT_RETURN CONTROLLED_EXIT CONTINUED_EXECUTION None 132 None 134 None 135 None 136 None 139 None Segmentation fault None Illegal instruction None Illegal instruction None 132 None stonesoup_trace:weakness_start