This test creates a connection to the MySQL database, and creates a query string based on data in an array passed by arguments. This data is not checked for special elements, however, and it is possible to construct a query string that performs unexpected data retrievals or modifications. FALSE org.apache.jmeter.NewDriver $SS_TC_ROOT/$SS_TC_INSTALL/classes/core:$SS_TC_ROOT/$SS_TC_INSTALL/classes/components:$SS_TC_ROOT/$SS_TC_INSTALL/classes/functions:$SS_TC_ROOT/$SS_TC_INSTALL/classes/jorphan:$SS_TC_ROOT/$SS_TC_INSTALL/classes/junit:$SS_TC_ROOT/$SS_TC_INSTALL/classes/monitor:$SS_TC_ROOT/$SS_TC_INSTALL/classes/protocol/ftp:$SS_TC_ROOT/$SS_TC_INSTALL/classes/protocol/http:$SS_TC_ROOT/$SS_TC_INSTALL/classes/protocol/java:$SS_TC_ROOT/$SS_TC_INSTALL/classes/protocol/jdbc:$SS_TC_ROOT/$SS_TC_INSTALL/classes/protocol/jms:$SS_TC_ROOT/$SS_TC_INSTALL/classes/protocol/ldap:$SS_TC_ROOT/$SS_TC_INSTALL/classes/protocol/mail:$SS_TC_ROOT/$SS_TC_INSTALL/classes/protocol/native:$SS_TC_ROOT/$SS_TC_INSTALL/classes/protocol/tcp:$SS_TC_ROOT/$SS_TC_INSTALL/classes/reports:$SS_TC_ROOT/$SS_TC_INSTALL/classes/res:$SS_TC_ROOT/$SS_TC_INSTALL/lib/*:$SS_TC_ROOT/$SS_TC_INSTALL/lib/opt/*:$SS_TC_DEPS/java/stonesoup/database/mysql/*:$SS_TC_DEPS/java/stonesoup/lttng/lttng-stonesoup-0.1.jar UNSPECIFIED UNSPECIFIED java $SS_JAVA_OPTS -Djava.library.path=$SS_TC_DEPS/lib64/ -cp $SS_JAVA_CLASSPATH -Djmeter.home="$SS_TC_ROOT/$SS_TC_INSTALL" org.apache.jmeter.NewDriver env ANT_HOME=$SS_TC_DEPS/ant ant $SS_ANT_OPTS -Dstonesoup.database.postgres.required=no -Dstonesoup.hibernate.postgres.required=no -Dstonesoup.hibernate.mysql.required=no -Dstonesoup.database.mysql.required=yes -Dstonesoup.socket.required=no -lib $SS_TC_DEPS/java/stonesoup/lttng/lttng-stonesoup-0.1.jar -Dstonesoup.socket.lib.dir="$SS_TC_DEPS/java/stonesoup/socket" -Dstonesoup.hibernate.mysql.lib.dir="$SS_TC_DEPS/java/stonesoup/hibernate/mysql" -Dstonesoup.hibernate.postgres.lib.dir="$SS_TC_DEPS/java/stonesoup/hibernate/postgres" -Dstonesoup.database.mysql.lib.dir="$SS_TC_DEPS/java/stonesoup/database/mysql" -Dstonesoup.database.postgres.lib.dir="$SS_TC_DEPS/java/stonesoup/database/postgres" -Ddist.dir="$SS_TC_ROOT/$SS_TC_INSTALL" -Dbuild.dir="$SS_TC_ROOT/$SS_TC_INSTALL" -Dstonesoup.lttng.lib.dir="$SS_TC_DEPS/java/stonesoup/lttng" -Dstonesoup.lttng.dummy.lib.dir="$SS_TC_DEPS/java/stonesoup/lttng-dummy" compile prepare-resources prepare-nonjar-dist -Dbuild.dir=$SS_TC_ROOT/$SS_TC_INSTALL/classes cp -r lib $SS_TC_ROOT/$SS_TC_INSTALL cp -r bin $SS_TC_ROOT/$SS_TC_INSTALL Environment variable defining test value. NONE $SS_TC_ROOT/$SS_TC_INSTALL $SS_TC_ROOT/testData/overreachingly_polynesian.bin shipper1 /opt/stonesoup/workspace/scripts/northwind_create_northwind_stqdhsdvpwktkddl.sql northwind_stqdhsdvpwktkddl $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-java.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so -n -t good-01/CSVSample.jmx DROP DATABASE IF EXISTS $SS_DBMYSQLDATABASE; STDOUT-01 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-01/CSVSample.jtl s="true" lb="Login as u1" rc="200" rm="OK" tn="Thread Group 1-1" dt="text" by="15" DOES_NOT_RETURN CONTROLLED_EXIT Environment variable defining test value. NONE $SS_TC_ROOT/$SS_TC_INSTALL $SS_TC_ROOT/testData/overreachingly_polynesian.bin NewShipper /opt/stonesoup/workspace/scripts/northwind_create_northwind_nptyisfifyckzdqx.sql northwind_nptyisfifyckzdqx $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-java.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so -n -t good-02/http-test.jmx DROP DATABASE IF EXISTS $SS_DBMYSQLDATABASE; STDOUT-02 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-02/http-test.jtl good-02/http-test.jtl DOES_NOT_RETURN CONTROLLED_EXIT Environment variable defining test value. NONE $SS_TC_ROOT/$SS_TC_INSTALL $SS_TC_ROOT/testData/overreachingly_polynesian.bin ShippingCompany /opt/stonesoup/workspace/scripts/northwind_create_northwind_wixlzvjixznpnbrx.sql northwind_wixlzvjixznpnbrx $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-java.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so -n -t good-03/http-test.jmx DROP DATABASE IF EXISTS $SS_DBMYSQLDATABASE; STDOUT-03 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-03/http-test.jtl good-03/http-test.jtl DOES_NOT_RETURN CONTROLLED_EXIT Environment variable defining test value. NONE $SS_TC_ROOT/$SS_TC_INSTALL $SS_TC_ROOT/testData/overreachingly_polynesian.bin shipper1 /opt/stonesoup/workspace/scripts/northwind_create_northwind_gnkkhfmyarnrlxoq.sql northwind_gnkkhfmyarnrlxoq $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-java.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so -n -t good-04/http-test.jmx DROP DATABASE IF EXISTS $SS_DBMYSQLDATABASE; STATUS-CHECK-01 AND STATUS-CHECK-02 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT bash -c "if [[ $(grep -E '<httpSample s=\"true\" lb=\"Homepage\" rc=\"200\" rm=\"OK\" tn=\"Thread Group 1-[1-5]\" dt=\"text\"/>' ../testData/good-04/http-test.jtl | wc -l) -eq 50 ]]; then true; else false; fi" bash -c "if [[ $(grep -E '<httpSample s=\"true\" lb=\"PageOne\" rc=\"200\" rm=\"OK\" tn=\"Thread Group 1-[1-5]\" dt=\"text\"/>' ../testData/good-04/http-test.jtl | wc -l) -eq 50 ]]; then true; else false; fi" DOES_NOT_RETURN CONTROLLED_EXIT Environment variable defining test value. NONE $SS_TC_ROOT/$SS_TC_INSTALL $SS_TC_ROOT/testData/overreachingly_polynesian.bin NewShipper /opt/stonesoup/workspace/scripts/northwind_create_northwind_aprinkiuddfmowpp.sql northwind_aprinkiuddfmowpp $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-java.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so -n -t good-05/http-test.jmx DROP DATABASE IF EXISTS $SS_DBMYSQLDATABASE; STDOUT-05 AND GOOD-05-HOSTNAME AND GOOD-05-LS AND GOOD-05-NETSTAT AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-05/http-test.jtl good-05/http-test.jtl if [[ -a good-05/hostname.out ]]; then exit 0; else exit 1; fi; if [[ -a good-05/ls.out ]]; then exit 0; else exit 1; fi; if [[ -a good-05/netstat.out ]]; then exit 0; else exit 1; fi; DOES_NOT_RETURN CONTROLLED_EXIT Environment variable defining test value. EXECUTE_UNAUTHORIZED_CODE $SS_TC_ROOT/$SS_TC_INSTALL $SS_TC_ROOT/testData/overreachingly_polynesian.bin BadShipper'), ('80', 'BadShipper2 /opt/stonesoup/workspace/scripts/northwind_create_northwind_ipkcdhynxfatmhob.sql northwind_ipkcdhynxfatmhob $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-java.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so -n -t good-03/http-test.jmx DROP DATABASE IF EXISTS $SS_DBMYSQLDATABASE; weakness_started_0HS1bs48Wl1HwD1OiEbY AND ((NOT PERFORMER AND (db_sql_output_1v356OhI3M OR db_sql_output_Jxab22Uy4L OR database_insert_check_fDcLobN6AA) AND NOT timeout_MsZXdUfim2) or (PERFORMER AND NOT ((db_sql_output_1v356OhI3M OR db_sql_output_Jxab22Uy4L OR database_insert_check_fDcLobN6AA) OR timeout_MsZXdUfim2))) DOES_NOT_RETURN CONTROLLED_EXIT CONTINUED_EXECUTION logfile.txt Number of Rows Affected: 2 logfile.txt Number of Rows Affected: 4 if `mysql -u $DBMYSQLUSER --password=$DBMYSQLPASSWORD -h $DBMYSQLHOST -D $SS_DBMYSQLDATABASE -e "select * from Shippers;" | grep -q "BadShipper2\|ShipAttack"`; then true; else false; fi; None stonesoup_trace:weakness_start Environment variable defining test value. EXECUTE_UNAUTHORIZED_CODE $SS_TC_ROOT/$SS_TC_INSTALL $SS_TC_ROOT/testData/overreachingly_polynesian.bin ShippersRUs'), ('55', 'BadShips'), ('65', 'ShipAttack'), ('45', 'MultiShip /opt/stonesoup/workspace/scripts/northwind_create_northwind_nnvjdpzjcamhofrf.sql northwind_nnvjdpzjcamhofrf $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-java.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so -n -t good-04/http-test.jmx DROP DATABASE IF EXISTS $SS_DBMYSQLDATABASE; weakness_started_Q7wdXeRvpGQKqGWZhpOt AND ((NOT PERFORMER AND (db_sql_output_2ImY6zHoeD OR db_sql_output_M4nLBL1O9N OR database_insert_check_7BIir2XFwC) AND NOT timeout_AoOmmRv5Bs) or (PERFORMER AND NOT ((db_sql_output_2ImY6zHoeD OR db_sql_output_M4nLBL1O9N OR database_insert_check_7BIir2XFwC) OR timeout_AoOmmRv5Bs))) DOES_NOT_RETURN CONTROLLED_EXIT CONTINUED_EXECUTION logfile.txt Number of Rows Affected: 2 logfile.txt Number of Rows Affected: 4 if `mysql -u $DBMYSQLUSER --password=$DBMYSQLPASSWORD -h $DBMYSQLHOST -D $SS_DBMYSQLDATABASE -e "select * from Shippers;" | grep -q "BadShipper2\|ShipAttack"`; then true; else false; fi; None stonesoup_trace:weakness_start