Creating test case using base program. Added an environment variable read to get a filename to read in the file contents using an fread operation within the function Completed injection. UNSPECIFIED UNSPECIFIED $SS_TC_ROOT/$SS_TC_INSTALL/bin/wireshark $SS_TC_ROOT/testData/input.pcap ./configure --prefix="$SS_TC_ROOT/$SS_TC_INSTALL" --enable-wireshark --with-gtk3=yes --without-lua --without-qt --with-gcrypt --with-gnutls --with-libsmi --with-pcap --with-zlib --without-portaudio --without-libcap --without-krb5 --with-cres --with-adns --with-geoip make V=1 CC="$SS_CC" make install V=1 Open saved .pcap file Has a fixed heap buffer of size 64, allocated within a struct (char [64]) NONE /opt/stonesoup/workspace/testData/outswell_undeprecated/galvin_tolyl.txt AAA $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 GOOD-01 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-01/output.txt DOES_NOT_RETURN CONTROLLED_EXIT export first 50 packets from saved pcap, run md5sum on newly created pcap Has a fixed heap buffer of size 64, allocated within a struct (char [64]) NONE /opt/stonesoup/workspace/testData/outswell_undeprecated/galvin_tolyl.txt Hellow world! $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 GOOD-02 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-02/output.txt DOES_NOT_RETURN CONTROLLED_EXIT jump to packet 10 Has a fixed heap buffer of size 64, allocated within a struct (char [64]) NONE /opt/stonesoup/workspace/testData/outswell_undeprecated/galvin_tolyl.txt Good-bye cruel world! $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 GOOD-03 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-03/output.txt DOES_NOT_RETURN CONTROLLED_EXIT open statistical summary Has a fixed heap buffer of size 64, allocated within a struct (char [64]) NONE /opt/stonesoup/workspace/testData/outswell_undeprecated/galvin_tolyl.txt AAA $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 GOOD-04 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-04/output.txt DOES_NOT_RETURN CONTROLLED_EXIT open protocol hierarchy Has a fixed heap buffer of size 64, allocated within a struct (char [64]) NONE /opt/stonesoup/workspace/testData/outswell_undeprecated/galvin_tolyl.txt Hellow world! $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 GOOD-05 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-05/output.txt DOES_NOT_RETURN CONTROLLED_EXIT follow a tcp stream Has a fixed heap buffer of size 64, allocated within a struct (char [64]) NONE /opt/stonesoup/workspace/testData/outswell_undeprecated/galvin_tolyl.txt Good-bye cruel world! $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 GOOD-06 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-06/output.txt DOES_NOT_RETURN CONTROLLED_EXIT run a display filter for http Has a fixed heap buffer of size 64, allocated within a struct (char [64]) NONE /opt/stonesoup/workspace/testData/outswell_undeprecated/galvin_tolyl.txt AAA $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 GOOD-07 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-07/output.txt DOES_NOT_RETURN CONTROLLED_EXIT export a .png from captured http traffic, run an md5, compare with known good Has a fixed heap buffer of size 64, allocated within a struct (char [64]) NONE /opt/stonesoup/workspace/testData/outswell_undeprecated/galvin_tolyl.txt Hellow world! $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 GOOD-08 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-08/output.txt DOES_NOT_RETURN CONTROLLED_EXIT search for a string Has a fixed heap buffer of size 64, allocated within a struct (char [64]) NONE /opt/stonesoup/workspace/testData/outswell_undeprecated/galvin_tolyl.txt Good-bye cruel world! $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 GOOD-09 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-09/output.txt DOES_NOT_RETURN CONTROLLED_EXIT open io graph Has a fixed heap buffer of size 64, allocated within a struct (char [64]) NONE /opt/stonesoup/workspace/testData/outswell_undeprecated/galvin_tolyl.txt AAA $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 GOOD-10 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-10/output.txt DOES_NOT_RETURN CONTROLLED_EXIT Has a fixed heap buffer of size 64, allocated within a struct (char [64]) DOS_UNCONTROLLED_EXIT /opt/stonesoup/workspace/testData/outswell_undeprecated/galvin_tolyl.txt AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 weakness_started_SuDMh2SHiGxxOlgUqpVg AND ((NOT PERFORMER AND (segfault_code_x0sVeVRuQS OR segfault_code_h5zf3hADvT OR segfault_code_iyuvEXPnGc OR segfault_code_RCsKZkBElB OR segfault_code_wppbOwVKMB OR segfault_msg_IAWxNHv4jk OR illegal_inst_msg_ioDXJfJb2g) AND NOT timeout_0iHQV9kiaa) or (PERFORMER AND NOT ((segfault_code_x0sVeVRuQS OR segfault_code_h5zf3hADvT OR segfault_code_iyuvEXPnGc OR segfault_code_RCsKZkBElB OR segfault_code_wppbOwVKMB OR segfault_msg_IAWxNHv4jk OR illegal_inst_msg_ioDXJfJb2g) OR timeout_0iHQV9kiaa))) (NOT PERFORMER AND (segfault_code_x0sVeVRuQS OR segfault_code_h5zf3hADvT OR segfault_code_iyuvEXPnGc OR segfault_code_RCsKZkBElB OR segfault_code_wppbOwVKMB OR segfault_msg_IAWxNHv4jk OR illegal_inst_msg_ioDXJfJb2g) AND NOT timeout_0iHQV9kiaa) or (PERFORMER AND NOT ((segfault_code_x0sVeVRuQS OR segfault_code_h5zf3hADvT OR segfault_code_iyuvEXPnGc OR segfault_code_RCsKZkBElB OR segfault_code_wppbOwVKMB OR segfault_msg_IAWxNHv4jk OR illegal_inst_msg_ioDXJfJb2g) OR timeout_0iHQV9kiaa)) DOES_NOT_RETURN CONTROLLED_EXIT CONTINUED_EXECUTION None 132 None 134 None 135 None 136 None 139 None Segmentation fault None Illegal instruction None stonesoup_trace:weakness_start Has a fixed heap buffer of size 64, allocated within a struct (char [64]) DOS_UNCONTROLLED_EXIT /opt/stonesoup/workspace/testData/outswell_undeprecated/galvin_tolyl.txt This is probably going to overflow a buffer of some sort. Let's run it anyway and see what happens. I hope that everything turns out ok, because I would love to see what this looks like in all CAPS. Converting ASCII characters to upper case is easy, you can either call a system function, or just add the standard difference between the start of the two character sets. But, I am sure there is a reason that system functions exist for this sort of functionality. $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-c.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so 0 weakness_started_ceBUe5uAN75Xwepdm548 AND ((NOT PERFORMER AND (segfault_code_awjl8SYa7P OR segfault_code_HkjYY7XkxI OR segfault_code_socC7P49bX OR segfault_code_t4Lal25NaE OR segfault_code_OitSBIVa3Q OR segfault_msg_EhSdkAf4yO OR illegal_inst_msg_ucYyTlSsha) AND NOT timeout_obEDFprK2P) or (PERFORMER AND NOT ((segfault_code_awjl8SYa7P OR segfault_code_HkjYY7XkxI OR segfault_code_socC7P49bX OR segfault_code_t4Lal25NaE OR segfault_code_OitSBIVa3Q OR segfault_msg_EhSdkAf4yO OR illegal_inst_msg_ucYyTlSsha) OR timeout_obEDFprK2P))) (NOT PERFORMER AND (segfault_code_awjl8SYa7P OR segfault_code_HkjYY7XkxI OR segfault_code_socC7P49bX OR segfault_code_t4Lal25NaE OR segfault_code_OitSBIVa3Q OR segfault_msg_EhSdkAf4yO OR illegal_inst_msg_ucYyTlSsha) AND NOT timeout_obEDFprK2P) or (PERFORMER AND NOT ((segfault_code_awjl8SYa7P OR segfault_code_HkjYY7XkxI OR segfault_code_socC7P49bX OR segfault_code_t4Lal25NaE OR segfault_code_OitSBIVa3Q OR segfault_msg_EhSdkAf4yO OR illegal_inst_msg_ucYyTlSsha) OR timeout_obEDFprK2P)) DOES_NOT_RETURN CONTROLLED_EXIT CONTINUED_EXECUTION None 132 None 134 None 135 None 136 None 139 None Segmentation fault None Illegal instruction None stonesoup_trace:weakness_start