Creating test case using base program. Added an environment variable read to the function definition. Completed injection. UNSPECIFIED UNSPECIFIED $SS_TC_ROOT/$SS_TC_INSTALL/bin/grep ./configure --prefix="$SS_TC_ROOT/$SS_TC_INSTALL" --exec-prefix="$SS_TC_ROOT/$SS_TC_INSTALL" --with-included-regex make V=1 CC="$SS_CC" CCLD="$SS_LNK" make V=1 install CC="$SS_CC" CCLD="$SS_LNK" all words beginning with e or x, case sensitive Good inputs:1) envrionment variable is set to a value whose length is less than or equal to 8 charsBad inputs:1) environment variable is not set2) environment variable is set to a value whose length is greater than 8 chars NONE Hello $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 ^[ex] input/dict.txt STDOUT-01 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-01/std-out.txt DOES_NOT_RETURN CONTROLLED_EXIT find BIRMINGHAM, ignore case, recursive Good inputs:1) envrionment variable is set to a value whose length is less than or equal to 8 charsBad inputs:1) environment variable is not set2) environment variable is set to a value whose length is greater than 8 chars NONE a $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 -r -i BIRMINGHAM input/zip/ STDOUT-02 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-02/std-out.txt DOES_NOT_RETURN CONTROLLED_EXIT read extented regular expressions from file Good inputs:1) envrionment variable is set to a value whose length is less than or equal to 8 charsBad inputs:1) environment variable is not set2) environment variable is set to a value whose length is greater than 8 chars NONE ok_str $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 -E -f input/grep-good-03-expr.txt input/mktsymbols.txt STDOUT-03 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-03/std-out.txt DOES_NOT_RETURN CONTROLLED_EXIT search for entire words matching a specific pattern Good inputs:1) envrionment variable is set to a value whose length is less than or equal to 8 charsBad inputs:1) environment variable is not set2) environment variable is set to a value whose length is greater than 8 chars NONE Hello $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 -w -f input/grep-good-04-expr.txt input/mktsymbols.txt STDOUT-04 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-04/std-out.txt DOES_NOT_RETURN CONTROLLED_EXIT use mmap(), find NASDAQ in file Good inputs:1) envrionment variable is set to a value whose length is less than or equal to 8 charsBad inputs:1) environment variable is not set2) environment variable is set to a value whose length is greater than 8 chars NONE a $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 --mmap NASDAQ input/mktsymbols.txt STDOUT-05 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-05/std-out.txt DOES_NOT_RETURN CONTROLLED_EXIT match lines not containing NASDAQ, ignore case, count Good inputs:1) envrionment variable is set to a value whose length is less than or equal to 8 charsBad inputs:1) environment variable is not set2) environment variable is set to a value whose length is greater than 8 chars NONE ok_str $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 -v -i -c NASDAQ input/mktsymbols.txt STDOUT-06 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-06/std-out.txt DOES_NOT_RETURN CONTROLLED_EXIT grep stdin (a device), match words beginning w/ D, P, or Z, redirect file into stdin Good inputs:1) envrionment variable is set to a value whose length is less than or equal to 8 charsBad inputs:1) environment variable is not set2) environment variable is set to a value whose length is greater than 8 chars NONE Hello $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 -D read -e ^[DPZ] /dev/stdin < input/mktsymbols.txt STDOUT-07 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-07/std-out.txt DOES_NOT_RETURN CONTROLLED_EXIT extended grep, print number of lines of context Good inputs:1) envrionment variable is set to a value whose length is less than or equal to 8 charsBad inputs:1) environment variable is not set2) environment variable is set to a value whose length is greater than 8 chars NONE a $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 -E -C 15 ^[BRT] input/mktsymbols.txt STDOUT-08 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-08/std-out.txt DOES_NOT_RETURN CONTROLLED_EXIT lines not beginning w/ B, R or T Good inputs:1) envrionment variable is set to a value whose length is less than or equal to 8 charsBad inputs:1) environment variable is not set2) environment variable is set to a value whose length is greater than 8 chars NONE ok_str $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 -v ^[BRT] input/mktsymbols.txt STDOUT-09 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-09/std-out.txt DOES_NOT_RETURN CONTROLLED_EXIT count lines not beginning w/ B, R or T Good inputs:1) envrionment variable is set to a value whose length is less than or equal to 8 charsBad inputs:1) environment variable is not set2) environment variable is set to a value whose length is greater than 8 chars NONE Hello $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 -c -v ^[BRT] input/mktsymbols.txt STDOUT-10 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-10/std-out.txt DOES_NOT_RETURN CONTROLLED_EXIT Good inputs:1) envrionment variable is set to a value whose length is less than or equal to 8 charsBad inputs:1) environment variable is not set2) environment variable is set to a value whose length is greater than 8 chars DOS_UNCONTROLLED_EXIT This_input_is_too_long_to_be_contained_in_buffer $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 -D read -e ^[DPZ] /dev/stdin < input/mktsymbols.txt weakness_started_XgQCWiPJvMNml5gCkqcY AND ((NOT PERFORMER AND (segfault_code_6Bho0TECDv OR segfault_code_3D4nU2NVsI OR segfault_code_yflpmY2ky6 OR segfault_code_fjSV1ZnwEf OR segfault_code_8oBsG0xiaC OR segfault_msg_ff96Bv6oKk OR illegal_inst_msg_juUzCGg0Cl) AND NOT timeout_3qXV94OPar) or (PERFORMER AND NOT ((segfault_code_6Bho0TECDv OR segfault_code_3D4nU2NVsI OR segfault_code_yflpmY2ky6 OR segfault_code_fjSV1ZnwEf OR segfault_code_8oBsG0xiaC OR segfault_msg_ff96Bv6oKk OR illegal_inst_msg_juUzCGg0Cl) OR timeout_3qXV94OPar))) (NOT PERFORMER AND (segfault_code_6Bho0TECDv OR segfault_code_3D4nU2NVsI OR segfault_code_yflpmY2ky6 OR segfault_code_fjSV1ZnwEf OR segfault_code_8oBsG0xiaC OR segfault_msg_ff96Bv6oKk OR illegal_inst_msg_juUzCGg0Cl) AND NOT timeout_3qXV94OPar) or (PERFORMER AND NOT ((segfault_code_6Bho0TECDv OR segfault_code_3D4nU2NVsI OR segfault_code_yflpmY2ky6 OR segfault_code_fjSV1ZnwEf OR segfault_code_8oBsG0xiaC OR segfault_msg_ff96Bv6oKk OR illegal_inst_msg_juUzCGg0Cl) OR timeout_3qXV94OPar)) DOES_NOT_RETURN CONTROLLED_EXIT CONTINUED_EXECUTION None 132 None 134 None 135 None 136 None 139 None Segmentation fault None Illegal instruction None stonesoup_trace:weakness_start Good inputs:1) envrionment variable is set to a value whose length is less than or equal to 8 charsBad inputs:1) environment variable is not set2) environment variable is set to a value whose length is greater than 8 chars DOS_UNCONTROLLED_EXIT abcdefghijklmnopqrstuvwxyzabcdefghijklmnopqrstuvwxyz $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 -E -C 15 ^[BRT] input/mktsymbols.txt weakness_started_TVrBAYrpivmdCAuspPUr AND ((NOT PERFORMER AND (segfault_code_ZKbUD2e3wx OR segfault_code_hHhBdAAhk9 OR segfault_code_bV0rMzf2H8 OR segfault_code_sI7D9Z7Gjj OR segfault_code_VAoEwoQxYQ OR segfault_msg_w5wlqSzaRl OR illegal_inst_msg_OgNR3ERZRh) AND NOT timeout_1nJbOlrMqc) or (PERFORMER AND NOT ((segfault_code_ZKbUD2e3wx OR segfault_code_hHhBdAAhk9 OR segfault_code_bV0rMzf2H8 OR segfault_code_sI7D9Z7Gjj OR segfault_code_VAoEwoQxYQ OR segfault_msg_w5wlqSzaRl OR illegal_inst_msg_OgNR3ERZRh) OR timeout_1nJbOlrMqc))) (NOT PERFORMER AND (segfault_code_ZKbUD2e3wx OR segfault_code_hHhBdAAhk9 OR segfault_code_bV0rMzf2H8 OR segfault_code_sI7D9Z7Gjj OR segfault_code_VAoEwoQxYQ OR segfault_msg_w5wlqSzaRl OR illegal_inst_msg_OgNR3ERZRh) AND NOT timeout_1nJbOlrMqc) or (PERFORMER AND NOT ((segfault_code_ZKbUD2e3wx OR segfault_code_hHhBdAAhk9 OR segfault_code_bV0rMzf2H8 OR segfault_code_sI7D9Z7Gjj OR segfault_code_VAoEwoQxYQ OR segfault_msg_w5wlqSzaRl OR illegal_inst_msg_OgNR3ERZRh) OR timeout_1nJbOlrMqc)) DOES_NOT_RETURN CONTROLLED_EXIT CONTINUED_EXECUTION None 132 None 134 None 135 None 136 None 139 None Segmentation fault None Illegal instruction None stonesoup_trace:weakness_start