Creating test case using base program. Added an environment variable read to the function definition. Completed injection. UNSPECIFIED UNSPECIFIED $SS_TC_ROOT/$SS_TC_INSTALL/bin/gimp $SS_TC_ROOT/testData/input.jpg env ./configure --prefix="$SS_TC_ROOT/$SS_TC_INSTALL" --disable-alsatest --without-libmng --without-libexif --without-aa --without-librsvg --without-poppler --without-gvfs --without-libjasper --with-lcms --without-alsa --disable-python make V=1 CC="$SS_CC" make install V=1 Open saved jpg file Good inputs:1) environment variable is a string value with no formatting2) environement variable is a format string that doesn't expose application dataBad inputs:1) environment variable is a format string that exposes application data NONE this is a string to be printed $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 GOOD-01 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT input image opened. DOES_NOT_RETURN CONTROLLED_EXIT color invert an image Good inputs:1) environment variable is a string value with no formatting2) environement variable is a format string that doesn't expose application dataBad inputs:1) environment variable is a format string that exposes application data NONE c29tZSBiZW5pZ24gZm9ybWF0dGluZyBmb3IgY2hhciBzdHJpbmcgCg== $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 GOOD-02 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT image colors inverted DOES_NOT_RETURN CONTROLLED_EXIT create a layer, fill with black, use divde layer mode Good inputs:1) environment variable is a string value with no formatting2) environement variable is a format string that doesn't expose application dataBad inputs:1) environment variable is a format string that exposes application data NONE Cg== $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 GOOD-03 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT Layer created, and layer mode changed. DOES_NOT_RETURN CONTROLLED_EXIT view color histogram of image Good inputs:1) environment variable is a string value with no formatting2) environement variable is a format string that doesn't expose application dataBad inputs:1) environment variable is a format string that exposes application data NONE this is a string to be printed $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 GOOD-04 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT Histogram of image generated. DOES_NOT_RETURN CONTROLLED_EXIT add supernova filter Good inputs:1) environment variable is a string value with no formatting2) environement variable is a format string that doesn't expose application dataBad inputs:1) environment variable is a format string that exposes application data NONE c29tZSBiZW5pZ24gZm9ybWF0dGluZyBmb3IgY2hhciBzdHJpbmcgCg== $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 GOOD-05 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT supernova added DOES_NOT_RETURN CONTROLLED_EXIT make selection with magic wand, paste into new image Good inputs:1) environment variable is a string value with no formatting2) environement variable is a format string that doesn't expose application dataBad inputs:1) environment variable is a format string that exposes application data NONE Cg== $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 GOOD-06 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT Magic Wand selection pasted into new document. DOES_NOT_RETURN CONTROLLED_EXIT rotate image 180 degrees Good inputs:1) environment variable is a string value with no formatting2) environement variable is a format string that doesn't expose application dataBad inputs:1) environment variable is a format string that exposes application data NONE this is a string to be printed $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 GOOD-07 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT Image rotated 180 degrees. DOES_NOT_RETURN CONTROLLED_EXIT add pagecurl filter Good inputs:1) environment variable is a string value with no formatting2) environement variable is a format string that doesn't expose application dataBad inputs:1) environment variable is a format string that exposes application data NONE c29tZSBiZW5pZ24gZm9ybWF0dGluZyBmb3IgY2hhciBzdHJpbmcgCg== $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 GOOD-08 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT pagecurl added DOES_NOT_RETURN CONTROLLED_EXIT use edgefinder filter Good inputs:1) environment variable is a string value with no formatting2) environement variable is a format string that doesn't expose application dataBad inputs:1) environment variable is a format string that exposes application data NONE Cg== $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 GOOD-09 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT pagecurl added DOES_NOT_RETURN CONTROLLED_EXIT pixelize image Good inputs:1) environment variable is a string value with no formatting2) environement variable is a format string that doesn't expose application dataBad inputs:1) environment variable is a format string that exposes application data NONE this is a string to be printed $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 GOOD-10 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT image pixelized. DOES_NOT_RETURN CONTROLLED_EXIT Good inputs:1) environment variable is a string value with no formatting2) environement variable is a format string that doesn't expose application dataBad inputs:1) environment variable is a format string that exposes application data READ_APPLICATION_DATA DOS_UNCONTROLLED_EXIT %0500d $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 weakness_started_s1HI9u3cv5WcLO0HAq08 AND ((NOT PERFORMER AND (segfault_code_ZNobbiKVGY OR segfault_code_tOx6vvl075 OR segfault_code_oCDPl9Awde OR segfault_code_QEHSpfafad OR segfault_code_neZNVvhpx2 OR segfault_msg_SPvr312GGC OR illegal_inst_msg_Itjc9OBDX5 OR stack_overread_DQJknnXkDe) AND NOT timeout_ISpoAeJFYe) or (PERFORMER AND NOT ((segfault_code_ZNobbiKVGY OR segfault_code_tOx6vvl075 OR segfault_code_oCDPl9Awde OR segfault_code_QEHSpfafad OR segfault_code_neZNVvhpx2 OR segfault_msg_SPvr312GGC OR illegal_inst_msg_Itjc9OBDX5 OR stack_overread_DQJknnXkDe) OR timeout_ISpoAeJFYe))) (NOT PERFORMER AND (segfault_code_ZNobbiKVGY OR segfault_code_tOx6vvl075 OR segfault_code_oCDPl9Awde OR segfault_code_QEHSpfafad OR segfault_code_neZNVvhpx2 OR segfault_msg_SPvr312GGC OR illegal_inst_msg_Itjc9OBDX5 OR stack_overread_DQJknnXkDe) AND NOT timeout_ISpoAeJFYe) or (PERFORMER AND NOT ((segfault_code_ZNobbiKVGY OR segfault_code_tOx6vvl075 OR segfault_code_oCDPl9Awde OR segfault_code_QEHSpfafad OR segfault_code_neZNVvhpx2 OR segfault_msg_SPvr312GGC OR illegal_inst_msg_Itjc9OBDX5 OR stack_overread_DQJknnXkDe) OR timeout_ISpoAeJFYe)) DOES_NOT_RETURN CONTROLLED_EXIT CONTINUED_EXECUTION None 132 None 134 None 135 None 136 None 139 None Segmentation fault None Illegal instruction logfile.txt ([0-9a-fA-F]{2}){60,} None stonesoup_trace:weakness_start Good inputs:1) environment variable is a string value with no formatting2) environement variable is a format string that doesn't expose application dataBad inputs:1) environment variable is a format string that exposes application data READ_APPLICATION_DATA DOS_UNCONTROLLED_EXIT %.08x%.08x%.08x%.08x%.08x%.08x%.08x%.08x%.08x%.08x%.08x%.08x%.08x%.08x%.08x $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 weakness_started_RtzIlCg6tcVz32uhPgeb AND ((NOT PERFORMER AND (segfault_code_A19Wk1nJJn OR segfault_code_fNhQO6PnKi OR segfault_code_SZxPwRTZxu OR segfault_code_5861gx4FUm OR segfault_code_Da5ZjHHhhu OR segfault_msg_ktjjqoTaDA OR illegal_inst_msg_vucOB5XJmZ OR stack_overread_YXU4eys17a) AND NOT timeout_2bfQ0O3i9z) or (PERFORMER AND NOT ((segfault_code_A19Wk1nJJn OR segfault_code_fNhQO6PnKi OR segfault_code_SZxPwRTZxu OR segfault_code_5861gx4FUm OR segfault_code_Da5ZjHHhhu OR segfault_msg_ktjjqoTaDA OR illegal_inst_msg_vucOB5XJmZ OR stack_overread_YXU4eys17a) OR timeout_2bfQ0O3i9z))) (NOT PERFORMER AND (segfault_code_A19Wk1nJJn OR segfault_code_fNhQO6PnKi OR segfault_code_SZxPwRTZxu OR segfault_code_5861gx4FUm OR segfault_code_Da5ZjHHhhu OR segfault_msg_ktjjqoTaDA OR illegal_inst_msg_vucOB5XJmZ OR stack_overread_YXU4eys17a) AND NOT timeout_2bfQ0O3i9z) or (PERFORMER AND NOT ((segfault_code_A19Wk1nJJn OR segfault_code_fNhQO6PnKi OR segfault_code_SZxPwRTZxu OR segfault_code_5861gx4FUm OR segfault_code_Da5ZjHHhhu OR segfault_msg_ktjjqoTaDA OR illegal_inst_msg_vucOB5XJmZ OR stack_overread_YXU4eys17a) OR timeout_2bfQ0O3i9z)) DOES_NOT_RETURN CONTROLLED_EXIT CONTINUED_EXECUTION None 132 None 134 None 135 None 136 None 139 None Segmentation fault None Illegal instruction logfile.txt ([0-9a-fA-F]{2}){60,} None stonesoup_trace:weakness_start