Creating test case using base program. Added an environment variable read to get a key in order to read in data from shared memory. Completed injection. TRUE UNSPECIFIED UNSPECIFIED $SS_TC_ROOT/$SS_TC_INSTALL/bin/postgres -p 8432 ./configure --prefix="$SS_TC_ROOT/$SS_TC_INSTALL" --with-pgport=8432 --with-libraries="$SS_TC_DEPS/lib" --with-includes="$SS_TC_DEPS/include" --with-openssl --with-libxml --with-libxslt --without-selinux --with-readline --without-tcl --without-perl --without-python --without-gssapi --without-pam --without-krb5 --with-ldap --without-bonjour --with-zlib --disable-thread-safety make CC="$SS_CC" CCLD="$SS_LNK" make install CC="$SS_CC" CCLD="$SS_LNK" initalize a database Creates a union that can be either an int or a char *. If input is a non-zero number, set union to that number, else set union to the input string. Try to access the union as a string, regardless of how it is set. Seg fault if the input is a non-zero number. NONE $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 sudo -E -u postgres $SS_TC_ROOT/$SS_TC_INSTALL/bin/initdb $SS_TC_ROOT/testData/good-01/psqldb (UTF8 OR ASCII) AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-01/good-01-UTF8.out good-01/good-01-ASCII.out DOES_NOT_RETURN CONTROLLED_EXIT perform a select Creates a union that can be either an int or a char *. If input is a non-zero number, set union to that number, else set union to the input string. Try to access the union as a string, regardless of how it is set. Seg fault if the input is a non-zero number. NONE $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 -D $SS_TC_ROOT/testData/good-02/psql GOOD-02 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-02/good-02.out DOES_NOT_RETURN CONTROLLED_EXIT perform an insert Creates a union that can be either an int or a char *. If input is a non-zero number, set union to that number, else set union to the input string. Try to access the union as a string, regardless of how it is set. Seg fault if the input is a non-zero number. NONE $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 -D $SS_TC_ROOT/testData/good-03/psql GOOD-03 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-03/good-03.out DOES_NOT_RETURN CONTROLLED_EXIT perform a create Creates a union that can be either an int or a char *. If input is a non-zero number, set union to that number, else set union to the input string. Try to access the union as a string, regardless of how it is set. Seg fault if the input is a non-zero number. NONE $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 -D $SS_TC_ROOT/testData/good-04/psql GOOD-04 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-04/good-04.out DOES_NOT_RETURN CONTROLLED_EXIT perform a delete Creates a union that can be either an int or a char *. If input is a non-zero number, set union to that number, else set union to the input string. Try to access the union as a string, regardless of how it is set. Seg fault if the input is a non-zero number. NONE $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 -D $SS_TC_ROOT/testData/good-05/psql GOOD-05 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-05/good-05.out DOES_NOT_RETURN CONTROLLED_EXIT perform a drop Creates a union that can be either an int or a char *. If input is a non-zero number, set union to that number, else set union to the input string. Try to access the union as a string, regardless of how it is set. Seg fault if the input is a non-zero number. NONE $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 -D $SS_TC_ROOT/testData/good-06/psql GOOD-06 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-06/good-06.out DOES_NOT_RETURN CONTROLLED_EXIT import a .sql file Creates a union that can be either an int or a char *. If input is a non-zero number, set union to that number, else set union to the input string. Try to access the union as a string, regardless of how it is set. Seg fault if the input is a non-zero number. NONE $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 -D $SS_TC_ROOT/testData/good-07/psql GOOD-07 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-07/good-07.out DOES_NOT_RETURN CONTROLLED_EXIT perform an alter Creates a union that can be either an int or a char *. If input is a non-zero number, set union to that number, else set union to the input string. Try to access the union as a string, regardless of how it is set. Seg fault if the input is a non-zero number. NONE $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 -D $SS_TC_ROOT/testData/good-08/psql GOOD-08 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-08/good-08.out DOES_NOT_RETURN CONTROLLED_EXIT see who's logged in Creates a union that can be either an int or a char *. If input is a non-zero number, set union to that number, else set union to the input string. Try to access the union as a string, regardless of how it is set. Seg fault if the input is a non-zero number. NONE $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 -D $SS_TC_ROOT/testData/good-09/psql GOOD-09 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT \s*booktown\s*\|\s*root\s*\|\s*([0-9]{1,3}\.){3}[0-9]{1,3}\s* DOES_NOT_RETURN CONTROLLED_EXIT perform a select using LIKE Creates a union that can be either an int or a char *. If input is a non-zero number, set union to that number, else set union to the input string. Try to access the union as a string, regardless of how it is set. Seg fault if the input is a non-zero number. NONE $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 -D $SS_TC_ROOT/testData/good-10/psql GOOD-10 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-10/good-10.out DOES_NOT_RETURN CONTROLLED_EXIT Creates a union that can be either an int or a char *. If input is a non-zero number, set union to that number, else set union to the input string. Try to access the union as a string, regardless of how it is set. Seg fault if the input is a non-zero number. DOS_UNCONTROLLED_EXIT $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 -D $SS_TC_ROOT/testData/good-08/psql weakness_started_DNbkX7N90fWT4nCl8eax AND ((NOT PERFORMER AND (segfault_code_h5kx3GQaCT OR segfault_code_JCHhV1qpiZ OR segfault_code_ndtEKiGddm OR segfault_code_IYLX4ye8CL OR segfault_code_ndc2FwSMIZ OR segfault_code_s93DQLRhcW OR segfault_msg_HstNUxOO6M OR illegal_inst_msg_3rEwsGToJP) AND NOT timeout_peVpdl733q) or (PERFORMER AND NOT ((segfault_code_h5kx3GQaCT OR segfault_code_JCHhV1qpiZ OR segfault_code_ndtEKiGddm OR segfault_code_IYLX4ye8CL OR segfault_code_ndc2FwSMIZ OR segfault_code_s93DQLRhcW OR segfault_msg_HstNUxOO6M OR illegal_inst_msg_3rEwsGToJP) OR timeout_peVpdl733q OR controlled_exit_Ssi5v1D2QD))) (NOT PERFORMER AND (segfault_code_h5kx3GQaCT OR segfault_code_JCHhV1qpiZ OR segfault_code_ndtEKiGddm OR segfault_code_IYLX4ye8CL OR segfault_code_ndc2FwSMIZ OR segfault_code_s93DQLRhcW OR segfault_msg_HstNUxOO6M OR illegal_inst_msg_3rEwsGToJP) AND NOT timeout_peVpdl733q) or (PERFORMER AND NOT ((segfault_code_h5kx3GQaCT OR segfault_code_JCHhV1qpiZ OR segfault_code_ndtEKiGddm OR segfault_code_IYLX4ye8CL OR segfault_code_ndc2FwSMIZ OR segfault_code_s93DQLRhcW OR segfault_msg_HstNUxOO6M OR illegal_inst_msg_3rEwsGToJP) OR timeout_peVpdl733q OR controlled_exit_Ssi5v1D2QD)) DOES_NOT_RETURN CONTROLLED_EXIT CONTINUED_EXECUTION None 132 None 134 None 135 None 136 None 139 None 1 None Segmentation fault None Illegal instruction None stonesoup_trace:weakness_start Creates a union that can be either an int or a char *. If input is a non-zero number, set union to that number, else set union to the input string. Try to access the union as a string, regardless of how it is set. Seg fault if the input is a non-zero number. DOS_UNCONTROLLED_EXIT $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 -D $SS_TC_ROOT/testData/good-04/psql weakness_started_3EqjCIcIqZimYVPGRcrA AND ((NOT PERFORMER AND (segfault_code_WVNazNDYF8 OR segfault_code_7brsUqCfuV OR segfault_code_SFOrUz1QuO OR segfault_code_kFpm3QBfPY OR segfault_code_pME4jXH6yN OR segfault_code_tKSf2wSG4q OR segfault_msg_mcydYiy3dy OR illegal_inst_msg_E1GGxpYgp9) AND NOT timeout_S2F020ZbNI) or (PERFORMER AND NOT ((segfault_code_WVNazNDYF8 OR segfault_code_7brsUqCfuV OR segfault_code_SFOrUz1QuO OR segfault_code_kFpm3QBfPY OR segfault_code_pME4jXH6yN OR segfault_code_tKSf2wSG4q OR segfault_msg_mcydYiy3dy OR illegal_inst_msg_E1GGxpYgp9) OR timeout_S2F020ZbNI OR controlled_exit_lgAXdJM4Uy))) (NOT PERFORMER AND (segfault_code_WVNazNDYF8 OR segfault_code_7brsUqCfuV OR segfault_code_SFOrUz1QuO OR segfault_code_kFpm3QBfPY OR segfault_code_pME4jXH6yN OR segfault_code_tKSf2wSG4q OR segfault_msg_mcydYiy3dy OR illegal_inst_msg_E1GGxpYgp9) AND NOT timeout_S2F020ZbNI) or (PERFORMER AND NOT ((segfault_code_WVNazNDYF8 OR segfault_code_7brsUqCfuV OR segfault_code_SFOrUz1QuO OR segfault_code_kFpm3QBfPY OR segfault_code_pME4jXH6yN OR segfault_code_tKSf2wSG4q OR segfault_msg_mcydYiy3dy OR illegal_inst_msg_E1GGxpYgp9) OR timeout_S2F020ZbNI OR controlled_exit_lgAXdJM4Uy)) DOES_NOT_RETURN CONTROLLED_EXIT CONTINUED_EXECUTION None 132 None 134 None 135 None 136 None 139 None 1 None Segmentation fault None Illegal instruction None stonesoup_trace:weakness_start