Creating test case using base program. Added an environment variable read to get a filename to read in the file contents using an fread operation within the function Completed injection. UNSPECIFIED UNSPECIFIED $SS_TC_ROOT/$SS_TC_INSTALL/bin/tree make install CC="$SS_CC" LD="$SS_LNK" CFLAGS="$CFLAGS" CPPFLAGS="$CPPFLAGS" LDFLAGS="$LDFLAGS" prefix="$SS_TC_ROOT/$SS_TC_INSTALL" LIBS="$LIBS" Malloc a buffer. Copy the input string to the buffer. Search for 'e' in the string. Upon finding 'e', free the buffer, using a pointer that points to that 'e'. If 'e' is the first character in the buffer, everything is OK. However, if e is not the first character in the buffer, this will seg fault. NONE /opt/stonesoup/workspace/testData/balladry_autoput/pliskies_leucins.txt eAAA $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 1 --charset ASCII --sort=name -n -q input/good-01 STDOUT-REPORT-01 AND STDOUT-CONTENT-LENGTH-01 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT 5 directories, 10 files SIMILAR DOES_NOT_RETURN CONTROLLED_EXIT Malloc a buffer. Copy the input string to the buffer. Search for 'e' in the string. Upon finding 'e', free the buffer, using a pointer that points to that 'e'. If 'e' is the first character in the buffer, everything is OK. However, if e is not the first character in the buffer, this will seg fault. NONE /opt/stonesoup/workspace/testData/balladry_autoput/pliskies_leucins.txt e12345 Hello world! $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 1 --charset ASCII --sort=name -n -q -L 2 input/good-02 STDOUT-REPORT-02 AND STDOUT-CONTENT-LENGTH-02 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT 5 directories, 4 files SIMILAR DOES_NOT_RETURN CONTROLLED_EXIT Malloc a buffer. Copy the input string to the buffer. Search for 'e' in the string. Upon finding 'e', free the buffer, using a pointer that points to that 'e'. If 'e' is the first character in the buffer, everything is OK. However, if e is not the first character in the buffer, this will seg fault. NONE /opt/stonesoup/workspace/testData/balladry_autoput/pliskies_leucins.txt e This string begins with an e $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 1 --charset ASCII --sort=name -n -q -J input/good-03 STDOUT-REPORT-03 AND STDOUT-CONTENT-LENGTH-03 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT {"type":"report","directories":7,"files":367} SIMILAR DOES_NOT_RETURN CONTROLLED_EXIT Malloc a buffer. Copy the input string to the buffer. Search for 'e' in the string. Upon finding 'e', free the buffer, using a pointer that points to that 'e'. If 'e' is the first character in the buffer, everything is OK. However, if e is not the first character in the buffer, this will seg fault. NONE /opt/stonesoup/workspace/testData/balladry_autoput/pliskies_leucins.txt eAAA $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 1 --charset ASCII --sort=name -n -q -P "test*" -F input/good-03 STDOUT-REPORT-04 AND STDOUT-CONTENT-LENGTH-04 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT 7 directories, 62 files SIMILAR DOES_NOT_RETURN CONTROLLED_EXIT Malloc a buffer. Copy the input string to the buffer. Search for 'e' in the string. Upon finding 'e', free the buffer, using a pointer that points to that 'e'. If 'e' is the first character in the buffer, everything is OK. However, if e is not the first character in the buffer, this will seg fault. NONE /opt/stonesoup/workspace/testData/balladry_autoput/pliskies_leucins.txt e12345 Hello world! $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 1 --charset ASCII --sort=name -n -q -H "" input/good-01 STDOUT-REPORT-05 AND STDOUT-CONTENT-LENGTH-05 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT 5 directories, 10 files SIMILAR DOES_NOT_RETURN CONTROLLED_EXIT Malloc a buffer. Copy the input string to the buffer. Search for 'e' in the string. Upon finding 'e', free the buffer, using a pointer that points to that 'e'. If 'e' is the first character in the buffer, everything is OK. However, if e is not the first character in the buffer, this will seg fault. DOS_UNCONTROLLED_EXIT /opt/stonesoup/workspace/testData/balladry_autoput/pliskies_leucins.txt aaa $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 1 --charset ASCII --sort=name -n -q -P "test*" -F input/good-03 weakness_started_hfcnWIpE6gDxSudMl7LV AND ((NOT PERFORMER AND (segfault_code_44I0vljFar OR segfault_code_DMuXGAlg7b OR segfault_code_zG492F36Xt OR segfault_code_WpiogTr6R0 OR segfault_code_ax4x3JGzPK OR segfault_msg_JAnoe9GOWD OR illegal_inst_msg_IznFF2coxk OR segfault_glibc_7LTnZPqKWw) AND NOT timeout_Wzjfv9lKik) or (PERFORMER AND NOT ((segfault_code_44I0vljFar OR segfault_code_DMuXGAlg7b OR segfault_code_zG492F36Xt OR segfault_code_WpiogTr6R0 OR segfault_code_ax4x3JGzPK OR segfault_msg_JAnoe9GOWD OR illegal_inst_msg_IznFF2coxk OR segfault_glibc_7LTnZPqKWw) OR timeout_Wzjfv9lKik))) (NOT PERFORMER AND (segfault_code_44I0vljFar OR segfault_code_DMuXGAlg7b OR segfault_code_zG492F36Xt OR segfault_code_WpiogTr6R0 OR segfault_code_ax4x3JGzPK OR segfault_msg_JAnoe9GOWD OR illegal_inst_msg_IznFF2coxk OR segfault_glibc_7LTnZPqKWw) AND NOT timeout_Wzjfv9lKik) or (PERFORMER AND NOT ((segfault_code_44I0vljFar OR segfault_code_DMuXGAlg7b OR segfault_code_zG492F36Xt OR segfault_code_WpiogTr6R0 OR segfault_code_ax4x3JGzPK OR segfault_msg_JAnoe9GOWD OR illegal_inst_msg_IznFF2coxk OR segfault_glibc_7LTnZPqKWw) OR timeout_Wzjfv9lKik)) DOES_NOT_RETURN CONTROLLED_EXIT CONTINUED_EXECUTION None 132 None 134 None 135 None 136 None 139 None Segmentation fault None Illegal instruction None glibc detected None stonesoup_trace:weakness_start Malloc a buffer. Copy the input string to the buffer. Search for 'e' in the string. Upon finding 'e', free the buffer, using a pointer that points to that 'e'. If 'e' is the first character in the buffer, everything is OK. However, if e is not the first character in the buffer, this will seg fault. DOS_UNCONTROLLED_EXIT /opt/stonesoup/workspace/testData/balladry_autoput/pliskies_leucins.txt this string has doe not begin with an e $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 1 --charset ASCII --sort=name -n -q -L 2 input/good-02 weakness_started_e9DNkzfZUK3SnVQ9XlEp AND ((NOT PERFORMER AND (segfault_code_3SN42cbSkk OR segfault_code_b4Khci2WpT OR segfault_code_XAl9IUcz6k OR segfault_code_yXS3jgIcvK OR segfault_code_FHXjsHlEVu OR segfault_msg_nPp30n53fw OR illegal_inst_msg_xy0vlnrrHM OR segfault_glibc_0UtDu18uez) AND NOT timeout_iEdMp635MC) or (PERFORMER AND NOT ((segfault_code_3SN42cbSkk OR segfault_code_b4Khci2WpT OR segfault_code_XAl9IUcz6k OR segfault_code_yXS3jgIcvK OR segfault_code_FHXjsHlEVu OR segfault_msg_nPp30n53fw OR illegal_inst_msg_xy0vlnrrHM OR segfault_glibc_0UtDu18uez) OR timeout_iEdMp635MC))) (NOT PERFORMER AND (segfault_code_3SN42cbSkk OR segfault_code_b4Khci2WpT OR segfault_code_XAl9IUcz6k OR segfault_code_yXS3jgIcvK OR segfault_code_FHXjsHlEVu OR segfault_msg_nPp30n53fw OR illegal_inst_msg_xy0vlnrrHM OR segfault_glibc_0UtDu18uez) AND NOT timeout_iEdMp635MC) or (PERFORMER AND NOT ((segfault_code_3SN42cbSkk OR segfault_code_b4Khci2WpT OR segfault_code_XAl9IUcz6k OR segfault_code_yXS3jgIcvK OR segfault_code_FHXjsHlEVu OR segfault_msg_nPp30n53fw OR illegal_inst_msg_xy0vlnrrHM OR segfault_glibc_0UtDu18uez) OR timeout_iEdMp635MC)) DOES_NOT_RETURN CONTROLLED_EXIT CONTINUED_EXECUTION None 132 None 134 None 135 None 136 None 139 None Segmentation fault None Illegal instruction None glibc detected None stonesoup_trace:weakness_start