Creating test case using base program.
Added an environment variable read to the function definition.
Completed injection.
UNSPECIFIED
UNSPECIFIED
$SS_TC_ROOT/$SS_TC_INSTALL/bin/tree
make install CC="$SS_CC" LD="$SS_LNK" CFLAGS="$CFLAGS" CPPFLAGS="$CPPFLAGS" LDFLAGS="$LDFLAGS" prefix="$SS_TC_ROOT/$SS_TC_INSTALL" LIBS="$LIBS"
Has a buffer declared on the heap. malloc(64*sizeOf(char)) If input is shorter than 64 it will overflowdue to using improper sizeof and strlen checking
NONE
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaAAAAAAAAAAAAAAAA
$SS_TC_ROOT/logs/execute/lttng
$SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so
1
--charset ASCII --sort=name -n -q input/good-01
STDOUT-REPORT-01 AND STDOUT-CONTENT-LENGTH-01 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT
5 directories, 10 files
SIMILAR
DOES_NOT_RETURN
CONTROLLED_EXIT
Has a buffer declared on the heap. malloc(64*sizeOf(char)) If input is shorter than 64 it will overflowdue to using improper sizeof and strlen checking
NONE
Hello World! If this statement isn't more than 64 characters, it will go badly
$SS_TC_ROOT/logs/execute/lttng
$SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so
1
--charset ASCII --sort=name -n -q -L 2 input/good-02
STDOUT-REPORT-02 AND STDOUT-CONTENT-LENGTH-02 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT
5 directories, 4 files
SIMILAR
DOES_NOT_RETURN
CONTROLLED_EXIT
Has a buffer declared on the heap. malloc(64*sizeOf(char)) If input is shorter than 64 it will overflowdue to using improper sizeof and strlen checking
NONE
Short is good for buffer overflows, unless you make a mistake and get it wrong
$SS_TC_ROOT/logs/execute/lttng
$SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so
1
--charset ASCII --sort=name -n -q -J input/good-03
STDOUT-REPORT-03 AND STDOUT-CONTENT-LENGTH-03 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT
{"type":"report","directories":7,"files":367}
SIMILAR
DOES_NOT_RETURN
CONTROLLED_EXIT
Has a buffer declared on the heap. malloc(64*sizeOf(char)) If input is shorter than 64 it will overflowdue to using improper sizeof and strlen checking
NONE
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaAAAAAAAAAAAAAAAA
$SS_TC_ROOT/logs/execute/lttng
$SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so
1
--charset ASCII --sort=name -n -q -P "test*" -F input/good-03
STDOUT-REPORT-04 AND STDOUT-CONTENT-LENGTH-04 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT
7 directories, 62 files
SIMILAR
DOES_NOT_RETURN
CONTROLLED_EXIT
Has a buffer declared on the heap. malloc(64*sizeOf(char)) If input is shorter than 64 it will overflowdue to using improper sizeof and strlen checking
NONE
Hello World! If this statement isn't more than 64 characters, it will go badly
$SS_TC_ROOT/logs/execute/lttng
$SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so
1
--charset ASCII --sort=name -n -q -H "" input/good-01
STDOUT-REPORT-05 AND STDOUT-CONTENT-LENGTH-05 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT
5 directories, 10 files
SIMILAR
DOES_NOT_RETURN
CONTROLLED_EXIT
Has a buffer declared on the heap. malloc(64*sizeOf(char)) If input is shorter than 64 it will overflowdue to using improper sizeof and strlen checking
DOS_UNCONTROLLED_EXIT
AAAAAAAAAAAAAAA
$SS_TC_ROOT/logs/execute/lttng
$SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so
1
--charset ASCII --sort=name -n -q -H "" input/good-01
weakness_started_8GE1sRndB6h19Xpql8pd AND ((NOT PERFORMER AND (segfault_code_x7xvDM7XHu OR segfault_code_JPUtl95teE OR segfault_code_cwaXkGwpxK OR segfault_code_jLanzJckR0 OR segfault_code_tTOxjEl9Du OR segfault_msg_E5XXu2CW3F OR illegal_inst_msg_ns2zuGhiVR OR segfault_glibc_RqHYTrfByO) AND NOT timeout_Y9PPMJYWwM) or (PERFORMER AND NOT ((segfault_code_x7xvDM7XHu OR segfault_code_JPUtl95teE OR segfault_code_cwaXkGwpxK OR segfault_code_jLanzJckR0 OR segfault_code_tTOxjEl9Du OR segfault_msg_E5XXu2CW3F OR illegal_inst_msg_ns2zuGhiVR OR segfault_glibc_RqHYTrfByO) OR timeout_Y9PPMJYWwM)))
(NOT PERFORMER AND (segfault_code_x7xvDM7XHu OR segfault_code_JPUtl95teE OR segfault_code_cwaXkGwpxK OR segfault_code_jLanzJckR0 OR segfault_code_tTOxjEl9Du OR segfault_msg_E5XXu2CW3F OR illegal_inst_msg_ns2zuGhiVR OR segfault_glibc_RqHYTrfByO) AND NOT timeout_Y9PPMJYWwM) or (PERFORMER AND NOT ((segfault_code_x7xvDM7XHu OR segfault_code_JPUtl95teE OR segfault_code_cwaXkGwpxK OR segfault_code_jLanzJckR0 OR segfault_code_tTOxjEl9Du OR segfault_msg_E5XXu2CW3F OR illegal_inst_msg_ns2zuGhiVR OR segfault_glibc_RqHYTrfByO) OR timeout_Y9PPMJYWwM))
DOES_NOT_RETURN
CONTROLLED_EXIT
CONTINUED_EXECUTION
None
132
None
134
None
135
None
136
None
139
None
Segmentation fault
None
Illegal instruction
None
glibc detected
None
stonesoup_trace:weakness_start
Has a buffer declared on the heap. malloc(64*sizeOf(char)) If input is shorter than 64 it will overflowdue to using improper sizeof and strlen checking
DOS_UNCONTROLLED_EXIT
Short is now bad
$SS_TC_ROOT/logs/execute/lttng
$SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so
1
--charset ASCII --sort=name -n -q -L 2 input/good-02
weakness_started_hCBvijJ6qNVKH0nnu3sV AND ((NOT PERFORMER AND (segfault_code_hTndPfr7nI OR segfault_code_svBUokAS5N OR segfault_code_J3DOzvqxIp OR segfault_code_Ot7Iq6Bqim OR segfault_code_o8LgvCixc0 OR segfault_msg_YDcy4TLO99 OR illegal_inst_msg_Mhjn9ULKlB OR segfault_glibc_YsAZihVr2x) AND NOT timeout_S2BdFn7qfb) or (PERFORMER AND NOT ((segfault_code_hTndPfr7nI OR segfault_code_svBUokAS5N OR segfault_code_J3DOzvqxIp OR segfault_code_Ot7Iq6Bqim OR segfault_code_o8LgvCixc0 OR segfault_msg_YDcy4TLO99 OR illegal_inst_msg_Mhjn9ULKlB OR segfault_glibc_YsAZihVr2x) OR timeout_S2BdFn7qfb)))
(NOT PERFORMER AND (segfault_code_hTndPfr7nI OR segfault_code_svBUokAS5N OR segfault_code_J3DOzvqxIp OR segfault_code_Ot7Iq6Bqim OR segfault_code_o8LgvCixc0 OR segfault_msg_YDcy4TLO99 OR illegal_inst_msg_Mhjn9ULKlB OR segfault_glibc_YsAZihVr2x) AND NOT timeout_S2BdFn7qfb) or (PERFORMER AND NOT ((segfault_code_hTndPfr7nI OR segfault_code_svBUokAS5N OR segfault_code_J3DOzvqxIp OR segfault_code_Ot7Iq6Bqim OR segfault_code_o8LgvCixc0 OR segfault_msg_YDcy4TLO99 OR illegal_inst_msg_Mhjn9ULKlB OR segfault_glibc_YsAZihVr2x) OR timeout_S2BdFn7qfb))
DOES_NOT_RETURN
CONTROLLED_EXIT
CONTINUED_EXECUTION
None
132
None
134
None
135
None
136
None
139
None
Segmentation fault
None
Illegal instruction
None
glibc detected
None
stonesoup_trace:weakness_start