Creating test case using base program. Added an environment variable read to get a key in order to read in data from shared memory. Completed injection. UNSPECIFIED UNSPECIFIED $SS_TC_ROOT/$SS_TC_INSTALL/bin/tree make install CC="$SS_CC" LD="$SS_LNK" CFLAGS="$CFLAGS" CPPFLAGS="$CPPFLAGS" LDFLAGS="$LDFLAGS" prefix="$SS_TC_ROOT/$SS_TC_INSTALL" LIBS="$LIBS" Has a fixed heap buffer of size 64. (malloc(64*sizeof(char))) When input has a larger size, the heap buffer will be over read NONE $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 --charset ASCII --sort=name -n -q input/good-01 STDOUT-REPORT-01 AND STDOUT-CONTENT-LENGTH-01 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT 5 directories, 10 files SIMILAR DOES_NOT_RETURN CONTROLLED_EXIT Has a fixed heap buffer of size 64. (malloc(64*sizeof(char))) When input has a larger size, the heap buffer will be over read NONE $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 --charset ASCII --sort=name -n -q -L 2 input/good-02 STDOUT-REPORT-02 AND STDOUT-CONTENT-LENGTH-02 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT 5 directories, 4 files SIMILAR DOES_NOT_RETURN CONTROLLED_EXIT Has a fixed heap buffer of size 64. (malloc(64*sizeof(char))) When input has a larger size, the heap buffer will be over read NONE $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 --charset ASCII --sort=name -n -q -J input/good-03 STDOUT-REPORT-03 AND STDOUT-CONTENT-LENGTH-03 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT {"type":"report","directories":7,"files":367} SIMILAR DOES_NOT_RETURN CONTROLLED_EXIT Has a fixed heap buffer of size 64. (malloc(64*sizeof(char))) When input has a larger size, the heap buffer will be over read NONE $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 --charset ASCII --sort=name -n -q -P "test*" -F input/good-03 STDOUT-REPORT-04 AND STDOUT-CONTENT-LENGTH-04 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT 7 directories, 62 files SIMILAR DOES_NOT_RETURN CONTROLLED_EXIT Has a fixed heap buffer of size 64. (malloc(64*sizeof(char))) When input has a larger size, the heap buffer will be over read NONE $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 --charset ASCII --sort=name -n -q -H "" input/good-01 STDOUT-REPORT-05 AND STDOUT-CONTENT-LENGTH-05 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT 5 directories, 10 files SIMILAR DOES_NOT_RETURN CONTROLLED_EXIT Has a fixed heap buffer of size 64. (malloc(64*sizeof(char))) When input has a larger size, the heap buffer will be over read READ_APPLICATION_DATA $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 --charset ASCII --sort=name -n -q -L 2 input/good-02 weakness_started_Ik15DcFQcwW4Wxf1ypBv AND ((NOT PERFORMER AND (output_exceeds_63_bytes_YD8aM7heed AND output_excess_non_null_qHH8IEOmb9) AND NOT timeout_wyXH9GN8tM) or (PERFORMER AND NOT ((output_exceeds_63_bytes_YD8aM7heed AND output_excess_non_null_qHH8IEOmb9) OR timeout_wyXH9GN8tM))) (NOT PERFORMER AND (output_exceeds_63_bytes_YD8aM7heed AND output_excess_non_null_qHH8IEOmb9) AND NOT timeout_wyXH9GN8tM) or (PERFORMER AND NOT ((output_exceeds_63_bytes_YD8aM7heed AND output_excess_non_null_qHH8IEOmb9) OR timeout_wyXH9GN8tM)) DOES_NOT_RETURN CONTROLLED_EXIT CONTINUED_EXECUTION if (( $(wc -c "logfile.txt" | cut -d " " -f 1) > 126 )); then true; else false; fi; if (( $(head -c -126 "logfile.txt" | tr -d '0\n' | wc -c) > 0 )); then true; else false; fi; None stonesoup_trace:weakness_start Has a fixed heap buffer of size 64. (malloc(64*sizeof(char))) When input has a larger size, the heap buffer will be over read READ_APPLICATION_DATA $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 --charset ASCII --sort=name -n -q -L 2 input/good-02 weakness_started_CAJstc2lTdwZo1vOTsmB AND ((NOT PERFORMER AND (output_exceeds_63_bytes_mwYuStk8Ko AND output_excess_non_null_kLpyWKnWqA) AND NOT timeout_uxMHHy3s3A) or (PERFORMER AND NOT ((output_exceeds_63_bytes_mwYuStk8Ko AND output_excess_non_null_kLpyWKnWqA) OR timeout_uxMHHy3s3A))) (NOT PERFORMER AND (output_exceeds_63_bytes_mwYuStk8Ko AND output_excess_non_null_kLpyWKnWqA) AND NOT timeout_uxMHHy3s3A) or (PERFORMER AND NOT ((output_exceeds_63_bytes_mwYuStk8Ko AND output_excess_non_null_kLpyWKnWqA) OR timeout_uxMHHy3s3A)) DOES_NOT_RETURN CONTROLLED_EXIT CONTINUED_EXECUTION if (( $(wc -c "logfile.txt" | cut -d " " -f 1) > 126 )); then true; else false; fi; if (( $(head -c -126 "logfile.txt" | tr -d '0\n' | wc -c) > 0 )); then true; else false; fi; None stonesoup_trace:weakness_start