Creating test case using base program. Added an environment variable read to the function definition. Completed injection. UNSPECIFIED UNSPECIFIED $SS_TC_ROOT/$SS_TC_INSTALL/bin/gimp $SS_TC_ROOT/testData/input.jpg env ./configure --prefix="$SS_TC_ROOT/$SS_TC_INSTALL" --disable-alsatest --without-libmng --without-libexif --without-aa --without-librsvg --without-poppler --without-gvfs --without-libjasper --with-lcms --without-alsa --disable-python make V=1 CC="$SS_CC" make install V=1 Open saved jpg file Has a buffer declared on the stack. char[20] If input is resolved to a value larger than 20 it will overflow NONE /etc/passwd $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 GOOD-01 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT input image opened. DOES_NOT_RETURN CONTROLLED_EXIT color invert an image Has a buffer declared on the stack. char[20] If input is resolved to a value larger than 20 it will overflow NONE /etc/ssh/ssh_config $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 GOOD-02 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT image colors inverted DOES_NOT_RETURN CONTROLLED_EXIT create a layer, fill with black, use divde layer mode Has a buffer declared on the stack. char[20] If input is resolved to a value larger than 20 it will overflow NONE /usr/bin/gcc $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 GOOD-03 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT Layer created, and layer mode changed. DOES_NOT_RETURN CONTROLLED_EXIT view color histogram of image Has a buffer declared on the stack. char[20] If input is resolved to a value larger than 20 it will overflow NONE /etc/passwd $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 GOOD-04 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT Histogram of image generated. DOES_NOT_RETURN CONTROLLED_EXIT add supernova filter Has a buffer declared on the stack. char[20] If input is resolved to a value larger than 20 it will overflow NONE /etc/ssh/ssh_config $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 GOOD-05 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT supernova added DOES_NOT_RETURN CONTROLLED_EXIT make selection with magic wand, paste into new image Has a buffer declared on the stack. char[20] If input is resolved to a value larger than 20 it will overflow NONE /usr/bin/gcc $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 GOOD-06 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT Magic Wand selection pasted into new document. DOES_NOT_RETURN CONTROLLED_EXIT rotate image 180 degrees Has a buffer declared on the stack. char[20] If input is resolved to a value larger than 20 it will overflow NONE /etc/passwd $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 GOOD-07 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT Image rotated 180 degrees. DOES_NOT_RETURN CONTROLLED_EXIT add pagecurl filter Has a buffer declared on the stack. char[20] If input is resolved to a value larger than 20 it will overflow NONE /etc/ssh/ssh_config $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 GOOD-08 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT pagecurl added DOES_NOT_RETURN CONTROLLED_EXIT use edgefinder filter Has a buffer declared on the stack. char[20] If input is resolved to a value larger than 20 it will overflow NONE /usr/bin/gcc $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 GOOD-09 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT pagecurl added DOES_NOT_RETURN CONTROLLED_EXIT pixelize image Has a buffer declared on the stack. char[20] If input is resolved to a value larger than 20 it will overflow NONE /etc/passwd $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 GOOD-10 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT image pixelized. DOES_NOT_RETURN CONTROLLED_EXIT Has a buffer declared on the stack. char[20] If input is resolved to a value larger than 20 it will overflow DOS_UNCONTROLLED_EXIT ../testData $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 weakness_started_QqSqlRDX85R54BN07tMM AND ((NOT PERFORMER AND (segfault_code_964UXPB85N OR segfault_code_Ltb4rZF5RX OR segfault_code_izVWJZkDCj OR segfault_code_6L8TltEIC4 OR segfault_code_dt7TQdJ2Yx OR segfault_msg_V3eXQzYbtw OR illegal_inst_msg_TDeBNaqv9g) AND NOT timeout_YmWb4yelCV) or (PERFORMER AND NOT ((segfault_code_964UXPB85N OR segfault_code_Ltb4rZF5RX OR segfault_code_izVWJZkDCj OR segfault_code_6L8TltEIC4 OR segfault_code_dt7TQdJ2Yx OR segfault_msg_V3eXQzYbtw OR illegal_inst_msg_TDeBNaqv9g) OR timeout_YmWb4yelCV))) (NOT PERFORMER AND (segfault_code_964UXPB85N OR segfault_code_Ltb4rZF5RX OR segfault_code_izVWJZkDCj OR segfault_code_6L8TltEIC4 OR segfault_code_dt7TQdJ2Yx OR segfault_msg_V3eXQzYbtw OR illegal_inst_msg_TDeBNaqv9g) AND NOT timeout_YmWb4yelCV) or (PERFORMER AND NOT ((segfault_code_964UXPB85N OR segfault_code_Ltb4rZF5RX OR segfault_code_izVWJZkDCj OR segfault_code_6L8TltEIC4 OR segfault_code_dt7TQdJ2Yx OR segfault_msg_V3eXQzYbtw OR illegal_inst_msg_TDeBNaqv9g) OR timeout_YmWb4yelCV)) DOES_NOT_RETURN CONTROLLED_EXIT CONTINUED_EXECUTION None 132 None 134 None 135 None 136 None 139 None Segmentation fault None Illegal instruction None stonesoup_trace:weakness_start Has a buffer declared on the stack. char[20] If input is resolved to a value larger than 20 it will overflow DOS_UNCONTROLLED_EXIT ../testOutput $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 weakness_started_r9KjZljlRdtddiFYBT7S AND ((NOT PERFORMER AND (segfault_code_C3gNmU7jP4 OR segfault_code_g2GEify4g6 OR segfault_code_9R1NHEsQfC OR segfault_code_Ap3DfKuh24 OR segfault_code_HFF99iW2YM OR segfault_msg_0QW02TAFXT OR illegal_inst_msg_S24sVFBnk9) AND NOT timeout_ZzS26xL2aE) or (PERFORMER AND NOT ((segfault_code_C3gNmU7jP4 OR segfault_code_g2GEify4g6 OR segfault_code_9R1NHEsQfC OR segfault_code_Ap3DfKuh24 OR segfault_code_HFF99iW2YM OR segfault_msg_0QW02TAFXT OR illegal_inst_msg_S24sVFBnk9) OR timeout_ZzS26xL2aE))) (NOT PERFORMER AND (segfault_code_C3gNmU7jP4 OR segfault_code_g2GEify4g6 OR segfault_code_9R1NHEsQfC OR segfault_code_Ap3DfKuh24 OR segfault_code_HFF99iW2YM OR segfault_msg_0QW02TAFXT OR illegal_inst_msg_S24sVFBnk9) AND NOT timeout_ZzS26xL2aE) or (PERFORMER AND NOT ((segfault_code_C3gNmU7jP4 OR segfault_code_g2GEify4g6 OR segfault_code_9R1NHEsQfC OR segfault_code_Ap3DfKuh24 OR segfault_code_HFF99iW2YM OR segfault_msg_0QW02TAFXT OR illegal_inst_msg_S24sVFBnk9) OR timeout_ZzS26xL2aE)) DOES_NOT_RETURN CONTROLLED_EXIT CONTINUED_EXECUTION None 132 None 134 None 135 None 136 None 139 None Segmentation fault None Illegal instruction None stonesoup_trace:weakness_start