Creating test case using base program.
Added an environment variable read to the function definition.
Completed injection.
UNSPECIFIED
UNSPECIFIED
$SS_TC_ROOT/$SS_TC_INSTALL/bin/gimp $SS_TC_ROOT/testData/input.jpg
env
./configure --prefix="$SS_TC_ROOT/$SS_TC_INSTALL" --disable-alsatest --without-libmng --without-libexif --without-aa --without-librsvg --without-poppler --without-gvfs --without-libjasper --with-lcms --without-alsa --disable-python
make V=1 CC="$SS_CC"
make install V=1
Open saved jpg file
Has a buffer declared on the heap. malloc(64*sizeOf(char)) If input is shorter than 64 it will overflowdue to using improper sizeof and strlen checking
NONE
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaAAAAAAAAAAAAAAAA
$SS_TC_ROOT/logs/execute/lttng
$SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so
0
GOOD-01 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT
input image opened.
DOES_NOT_RETURN
CONTROLLED_EXIT
color invert an image
Has a buffer declared on the heap. malloc(64*sizeOf(char)) If input is shorter than 64 it will overflowdue to using improper sizeof and strlen checking
NONE
Hello World! If this statement isn't more than 64 characters, it will go badly
$SS_TC_ROOT/logs/execute/lttng
$SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so
0
GOOD-02 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT
image colors inverted
DOES_NOT_RETURN
CONTROLLED_EXIT
create a layer, fill with black, use divde layer mode
Has a buffer declared on the heap. malloc(64*sizeOf(char)) If input is shorter than 64 it will overflowdue to using improper sizeof and strlen checking
NONE
Short is good for buffer overflows, unless you make a mistake and get it wrong
$SS_TC_ROOT/logs/execute/lttng
$SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so
0
GOOD-03 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT
Layer created, and layer mode changed.
DOES_NOT_RETURN
CONTROLLED_EXIT
view color histogram of image
Has a buffer declared on the heap. malloc(64*sizeOf(char)) If input is shorter than 64 it will overflowdue to using improper sizeof and strlen checking
NONE
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaAAAAAAAAAAAAAAAA
$SS_TC_ROOT/logs/execute/lttng
$SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so
0
GOOD-04 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT
Histogram of image generated.
DOES_NOT_RETURN
CONTROLLED_EXIT
add supernova filter
Has a buffer declared on the heap. malloc(64*sizeOf(char)) If input is shorter than 64 it will overflowdue to using improper sizeof and strlen checking
NONE
Hello World! If this statement isn't more than 64 characters, it will go badly
$SS_TC_ROOT/logs/execute/lttng
$SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so
0
GOOD-05 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT
supernova added
DOES_NOT_RETURN
CONTROLLED_EXIT
make selection with magic wand, paste into new image
Has a buffer declared on the heap. malloc(64*sizeOf(char)) If input is shorter than 64 it will overflowdue to using improper sizeof and strlen checking
NONE
Short is good for buffer overflows, unless you make a mistake and get it wrong
$SS_TC_ROOT/logs/execute/lttng
$SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so
0
GOOD-06 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT
Magic Wand selection pasted into new document.
DOES_NOT_RETURN
CONTROLLED_EXIT
rotate image 180 degrees
Has a buffer declared on the heap. malloc(64*sizeOf(char)) If input is shorter than 64 it will overflowdue to using improper sizeof and strlen checking
NONE
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaAAAAAAAAAAAAAAAA
$SS_TC_ROOT/logs/execute/lttng
$SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so
0
GOOD-07 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT
Image rotated 180 degrees.
DOES_NOT_RETURN
CONTROLLED_EXIT
add pagecurl filter
Has a buffer declared on the heap. malloc(64*sizeOf(char)) If input is shorter than 64 it will overflowdue to using improper sizeof and strlen checking
NONE
Hello World! If this statement isn't more than 64 characters, it will go badly
$SS_TC_ROOT/logs/execute/lttng
$SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so
0
GOOD-08 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT
pagecurl added
DOES_NOT_RETURN
CONTROLLED_EXIT
use edgefinder filter
Has a buffer declared on the heap. malloc(64*sizeOf(char)) If input is shorter than 64 it will overflowdue to using improper sizeof and strlen checking
NONE
Short is good for buffer overflows, unless you make a mistake and get it wrong
$SS_TC_ROOT/logs/execute/lttng
$SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so
0
GOOD-09 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT
pagecurl added
DOES_NOT_RETURN
CONTROLLED_EXIT
pixelize image
Has a buffer declared on the heap. malloc(64*sizeOf(char)) If input is shorter than 64 it will overflowdue to using improper sizeof and strlen checking
NONE
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaAAAAAAAAAAAAAAAA
$SS_TC_ROOT/logs/execute/lttng
$SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so
0
GOOD-10 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT
image pixelized.
DOES_NOT_RETURN
CONTROLLED_EXIT
Has a buffer declared on the heap. malloc(64*sizeOf(char)) If input is shorter than 64 it will overflowdue to using improper sizeof and strlen checking
DOS_UNCONTROLLED_EXIT
AAAAAAAAAAAAAAA
$SS_TC_ROOT/logs/execute/lttng
$SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so
0
weakness_started_pmZquWHkmfZklvWWKUl3 AND ((NOT PERFORMER AND (segfault_code_ytOrMubEUf OR segfault_code_hsFkyyBi6E OR segfault_code_Z5X14jipOY OR segfault_code_MjMSJZJnEA OR segfault_code_AiMAuTnjvf OR segfault_msg_pwkbgYrV3B OR illegal_inst_msg_WYZg0Z4t7X) AND NOT timeout_z4BWo4I0JE) or (PERFORMER AND NOT ((segfault_code_ytOrMubEUf OR segfault_code_hsFkyyBi6E OR segfault_code_Z5X14jipOY OR segfault_code_MjMSJZJnEA OR segfault_code_AiMAuTnjvf OR segfault_msg_pwkbgYrV3B OR illegal_inst_msg_WYZg0Z4t7X) OR timeout_z4BWo4I0JE)))
(NOT PERFORMER AND (segfault_code_ytOrMubEUf OR segfault_code_hsFkyyBi6E OR segfault_code_Z5X14jipOY OR segfault_code_MjMSJZJnEA OR segfault_code_AiMAuTnjvf OR segfault_msg_pwkbgYrV3B OR illegal_inst_msg_WYZg0Z4t7X) AND NOT timeout_z4BWo4I0JE) or (PERFORMER AND NOT ((segfault_code_ytOrMubEUf OR segfault_code_hsFkyyBi6E OR segfault_code_Z5X14jipOY OR segfault_code_MjMSJZJnEA OR segfault_code_AiMAuTnjvf OR segfault_msg_pwkbgYrV3B OR illegal_inst_msg_WYZg0Z4t7X) OR timeout_z4BWo4I0JE))
DOES_NOT_RETURN
CONTROLLED_EXIT
CONTINUED_EXECUTION
None
132
None
134
None
135
None
136
None
139
None
Segmentation fault
None
Illegal instruction
None
stonesoup_trace:weakness_start
Has a buffer declared on the heap. malloc(64*sizeOf(char)) If input is shorter than 64 it will overflowdue to using improper sizeof and strlen checking
DOS_UNCONTROLLED_EXIT
Short is now bad
$SS_TC_ROOT/logs/execute/lttng
$SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so
0
weakness_started_xM4a0CWBj8DfJjCsTtgc AND ((NOT PERFORMER AND (segfault_code_Of9VhKa6jY OR segfault_code_uoBQynH0Fd OR segfault_code_bGco3cg6yC OR segfault_code_4jmT8RTqrW OR segfault_code_fWjF8kksrC OR segfault_msg_Il2oltB7zw OR illegal_inst_msg_Ii951jQx5R) AND NOT timeout_7YTaQw42E3) or (PERFORMER AND NOT ((segfault_code_Of9VhKa6jY OR segfault_code_uoBQynH0Fd OR segfault_code_bGco3cg6yC OR segfault_code_4jmT8RTqrW OR segfault_code_fWjF8kksrC OR segfault_msg_Il2oltB7zw OR illegal_inst_msg_Ii951jQx5R) OR timeout_7YTaQw42E3)))
(NOT PERFORMER AND (segfault_code_Of9VhKa6jY OR segfault_code_uoBQynH0Fd OR segfault_code_bGco3cg6yC OR segfault_code_4jmT8RTqrW OR segfault_code_fWjF8kksrC OR segfault_msg_Il2oltB7zw OR illegal_inst_msg_Ii951jQx5R) AND NOT timeout_7YTaQw42E3) or (PERFORMER AND NOT ((segfault_code_Of9VhKa6jY OR segfault_code_uoBQynH0Fd OR segfault_code_bGco3cg6yC OR segfault_code_4jmT8RTqrW OR segfault_code_fWjF8kksrC OR segfault_msg_Il2oltB7zw OR illegal_inst_msg_Ii951jQx5R) OR timeout_7YTaQw42E3))
DOES_NOT_RETURN
CONTROLLED_EXIT
CONTINUED_EXECUTION
None
132
None
134
None
135
None
136
None
139
None
Segmentation fault
None
Illegal instruction
None
stonesoup_trace:weakness_start