Creating test case using base program.
Added a Socket Server to accept communication from untrusted source.
Completed injection.
UNSPECIFIED
UNSPECIFIED
$SS_TC_ROOT/$SS_TC_INSTALL/bin/gimp $SS_TC_ROOT/testData/input.jpg
env
./configure --prefix="$SS_TC_ROOT/$SS_TC_INSTALL" --disable-alsatest --without-libmng --without-libexif --without-aa --without-librsvg --without-poppler --without-gvfs --without-libjasper --with-lcms --without-alsa --disable-python
make V=1 CC="$SS_CC"
make install V=1
Open saved jpg file
Malloc a function pointer. If the input length is not equal to 10, set the function pointer to a function. Try to use the function pointer. This will seg fault if the input length is exactly 10.
NONE
$SS_TC_ROOT/logs/execute/lttng
$SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so
0
GOOD-01 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT
input image opened.
DOES_NOT_RETURN
CONTROLLED_EXIT
color invert an image
Malloc a function pointer. If the input length is not equal to 10, set the function pointer to a function. Try to use the function pointer. This will seg fault if the input length is exactly 10.
NONE
$SS_TC_ROOT/logs/execute/lttng
$SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so
0
GOOD-02 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT
image colors inverted
DOES_NOT_RETURN
CONTROLLED_EXIT
create a layer, fill with black, use divde layer mode
Malloc a function pointer. If the input length is not equal to 10, set the function pointer to a function. Try to use the function pointer. This will seg fault if the input length is exactly 10.
NONE
$SS_TC_ROOT/logs/execute/lttng
$SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so
0
GOOD-03 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT
Layer created, and layer mode changed.
DOES_NOT_RETURN
CONTROLLED_EXIT
view color histogram of image
Malloc a function pointer. If the input length is not equal to 10, set the function pointer to a function. Try to use the function pointer. This will seg fault if the input length is exactly 10.
NONE
$SS_TC_ROOT/logs/execute/lttng
$SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so
0
GOOD-04 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT
Histogram of image generated.
DOES_NOT_RETURN
CONTROLLED_EXIT
add supernova filter
Malloc a function pointer. If the input length is not equal to 10, set the function pointer to a function. Try to use the function pointer. This will seg fault if the input length is exactly 10.
NONE
$SS_TC_ROOT/logs/execute/lttng
$SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so
0
GOOD-05 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT
supernova added
DOES_NOT_RETURN
CONTROLLED_EXIT
make selection with magic wand, paste into new image
Malloc a function pointer. If the input length is not equal to 10, set the function pointer to a function. Try to use the function pointer. This will seg fault if the input length is exactly 10.
NONE
$SS_TC_ROOT/logs/execute/lttng
$SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so
0
GOOD-06 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT
Magic Wand selection pasted into new document.
DOES_NOT_RETURN
CONTROLLED_EXIT
rotate image 180 degrees
Malloc a function pointer. If the input length is not equal to 10, set the function pointer to a function. Try to use the function pointer. This will seg fault if the input length is exactly 10.
NONE
$SS_TC_ROOT/logs/execute/lttng
$SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so
0
GOOD-07 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT
Image rotated 180 degrees.
DOES_NOT_RETURN
CONTROLLED_EXIT
add pagecurl filter
Malloc a function pointer. If the input length is not equal to 10, set the function pointer to a function. Try to use the function pointer. This will seg fault if the input length is exactly 10.
NONE
$SS_TC_ROOT/logs/execute/lttng
$SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so
0
GOOD-08 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT
pagecurl added
DOES_NOT_RETURN
CONTROLLED_EXIT
use edgefinder filter
Malloc a function pointer. If the input length is not equal to 10, set the function pointer to a function. Try to use the function pointer. This will seg fault if the input length is exactly 10.
NONE
$SS_TC_ROOT/logs/execute/lttng
$SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so
0
GOOD-09 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT
pagecurl added
DOES_NOT_RETURN
CONTROLLED_EXIT
pixelize image
Malloc a function pointer. If the input length is not equal to 10, set the function pointer to a function. Try to use the function pointer. This will seg fault if the input length is exactly 10.
NONE
$SS_TC_ROOT/logs/execute/lttng
$SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so
0
GOOD-10 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT
image pixelized.
DOES_NOT_RETURN
CONTROLLED_EXIT
Malloc a function pointer. If the input length is not equal to 10, set the function pointer to a function. Try to use the function pointer. This will seg fault if the input length is exactly 10.
DOS_UNCONTROLLED_EXIT
$SS_TC_ROOT/logs/execute/lttng
$SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so
0
weakness_started_YEPpqTtvCe5E4D49Cz7y AND ((NOT PERFORMER AND (segfault_code_ieIoRjPql6 OR segfault_code_J4JOgwsjKS OR segfault_code_ERM94bkRbd OR segfault_code_0qa5ubJj9J OR segfault_code_T8vNGzxQGB OR segfault_msg_yGWLJcPloj OR illegal_inst_msg_PNYraT5vDD OR segfault_illegal_inst_96oxkUkNx9 OR segfault_illegal_return_xhQtsZtt5z) AND NOT timeout_1pCCFo2WuU) or (PERFORMER AND NOT ((segfault_code_ieIoRjPql6 OR segfault_code_J4JOgwsjKS OR segfault_code_ERM94bkRbd OR segfault_code_0qa5ubJj9J OR segfault_code_T8vNGzxQGB OR segfault_msg_yGWLJcPloj OR illegal_inst_msg_PNYraT5vDD OR segfault_illegal_inst_96oxkUkNx9 OR segfault_illegal_return_xhQtsZtt5z) OR timeout_1pCCFo2WuU OR controlled_exit_jwfCObh1LE)))
(NOT PERFORMER AND (segfault_code_ieIoRjPql6 OR segfault_code_J4JOgwsjKS OR segfault_code_ERM94bkRbd OR segfault_code_0qa5ubJj9J OR segfault_code_T8vNGzxQGB OR segfault_msg_yGWLJcPloj OR illegal_inst_msg_PNYraT5vDD OR segfault_illegal_inst_96oxkUkNx9 OR segfault_illegal_return_xhQtsZtt5z) AND NOT timeout_1pCCFo2WuU) or (PERFORMER AND NOT ((segfault_code_ieIoRjPql6 OR segfault_code_J4JOgwsjKS OR segfault_code_ERM94bkRbd OR segfault_code_0qa5ubJj9J OR segfault_code_T8vNGzxQGB OR segfault_msg_yGWLJcPloj OR illegal_inst_msg_PNYraT5vDD OR segfault_illegal_inst_96oxkUkNx9 OR segfault_illegal_return_xhQtsZtt5z) OR timeout_1pCCFo2WuU OR controlled_exit_jwfCObh1LE))
DOES_NOT_RETURN
CONTROLLED_EXIT
CONTINUED_EXECUTION
None
132
None
134
None
135
None
136
None
139
None
Segmentation fault
None
Illegal instruction
None
Illegal instruction
None
132
None
stonesoup_trace:weakness_start
Malloc a function pointer. If the input length is not equal to 10, set the function pointer to a function. Try to use the function pointer. This will seg fault if the input length is exactly 10.
DOS_UNCONTROLLED_EXIT
$SS_TC_ROOT/logs/execute/lttng
$SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so
0
weakness_started_ysvQnAihDkwVO3m7p7Gv AND ((NOT PERFORMER AND (segfault_code_xtGUVzu8Rn OR segfault_code_rvX2TVm9NJ OR segfault_code_xZzJvsw2j2 OR segfault_code_PhhI6UxuBs OR segfault_code_xyB8eecuiW OR segfault_msg_UA7SwbF8x6 OR illegal_inst_msg_f0bHvRRjSd OR segfault_illegal_inst_3tJ0BR2CFn OR segfault_illegal_return_9tiNroqSW1) AND NOT timeout_bSZpWXpAty) or (PERFORMER AND NOT ((segfault_code_xtGUVzu8Rn OR segfault_code_rvX2TVm9NJ OR segfault_code_xZzJvsw2j2 OR segfault_code_PhhI6UxuBs OR segfault_code_xyB8eecuiW OR segfault_msg_UA7SwbF8x6 OR illegal_inst_msg_f0bHvRRjSd OR segfault_illegal_inst_3tJ0BR2CFn OR segfault_illegal_return_9tiNroqSW1) OR timeout_bSZpWXpAty OR controlled_exit_veImS06pbw)))
(NOT PERFORMER AND (segfault_code_xtGUVzu8Rn OR segfault_code_rvX2TVm9NJ OR segfault_code_xZzJvsw2j2 OR segfault_code_PhhI6UxuBs OR segfault_code_xyB8eecuiW OR segfault_msg_UA7SwbF8x6 OR illegal_inst_msg_f0bHvRRjSd OR segfault_illegal_inst_3tJ0BR2CFn OR segfault_illegal_return_9tiNroqSW1) AND NOT timeout_bSZpWXpAty) or (PERFORMER AND NOT ((segfault_code_xtGUVzu8Rn OR segfault_code_rvX2TVm9NJ OR segfault_code_xZzJvsw2j2 OR segfault_code_PhhI6UxuBs OR segfault_code_xyB8eecuiW OR segfault_msg_UA7SwbF8x6 OR illegal_inst_msg_f0bHvRRjSd OR segfault_illegal_inst_3tJ0BR2CFn OR segfault_illegal_return_9tiNroqSW1) OR timeout_bSZpWXpAty OR controlled_exit_veImS06pbw))
DOES_NOT_RETURN
CONTROLLED_EXIT
CONTINUED_EXECUTION
None
132
None
134
None
135
None
136
None
139
None
Segmentation fault
None
Illegal instruction
None
Illegal instruction
None
132
None
stonesoup_trace:weakness_start