This test creates a connection to the MySQL database, and creates a query string based on data in an array passed by arguments. This data is not checked for special elements, however, and it is possible to construct a query string that performs unexpected data retrievals or modifications. stonesoup.jtree.Main $SS_TC_ROOT/$SS_TC_INSTALL:$SS_TC_ROOT/$SS_TC_INSTALL/lib/*:$SS_TC_ROOT/$SS_TC_INSTALL/lib/opt/*:$SS_TC_DEPS/java/stonesoup/database/mysql/*:$SS_TC_DEPS/java/stonesoup/lttng/lttng-stonesoup-0.1.jar UNSPECIFIED UNSPECIFIED java $SS_JAVA_OPTS -Djava.library.path=$SS_TC_DEPS/lib64/ -cp "$SS_JAVA_CLASSPATH" stonesoup.jtree.Main env ANT_HOME=$SS_TC_DEPS/ant ant $SS_ANT_OPTS -Dstonesoup.database.postgres.required=no -Dstonesoup.hibernate.postgres.required=no -Dstonesoup.hibernate.mysql.required=no -Dstonesoup.database.mysql.required=yes -Dstonesoup.socket.required=no -lib $SS_TC_DEPS/java/stonesoup/lttng/lttng-stonesoup-0.1.jar -Dstonesoup.socket.lib.dir="$SS_TC_DEPS/java/stonesoup/socket" -Dstonesoup.hibernate.mysql.lib.dir="$SS_TC_DEPS/java/stonesoup/hibernate/mysql" -Dstonesoup.hibernate.postgres.lib.dir="$SS_TC_DEPS/java/stonesoup/hibernate/postgres" -Dstonesoup.database.mysql.lib.dir="$SS_TC_DEPS/java/stonesoup/database/mysql" -Dstonesoup.database.postgres.lib.dir="$SS_TC_DEPS/java/stonesoup/database/postgres" -Dstonesoup.lttng.lib.dir="$SS_TC_DEPS/java/stonesoup/lttng" -Dstonesoup.lttng.dummy.lib.dir="$SS_TC_DEPS/java/stonesoup/lttng-dummy" -Ddir.dist=$SS_TC_ROOT/$SS_TC_INSTALL build cp -r lib $SS_TC_ROOT/$SS_TC_INSTALL Environment variable defining test value. NONE $SS_TC_ROOT/testData/pishu_unpaint.bin shipper1 /opt/stonesoup/workspace/scripts/northwind_create_northwind_bfxgzndfbiijtaca.sql northwind_bfxgzndfbiijtaca $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-java.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so input/good-01 DROP DATABASE IF EXISTS $SS_DBMYSQLDATABASE; STDOUT-01 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-01/output.txt DOES_NOT_RETURN CONTROLLED_EXIT Environment variable defining test value. NONE $SS_TC_ROOT/testData/pishu_unpaint.bin NewShipper /opt/stonesoup/workspace/scripts/northwind_create_northwind_epanicnscyljgtlv.sql northwind_epanicnscyljgtlv $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-java.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so -l 1 input/good-02/ DROP DATABASE IF EXISTS $SS_DBMYSQLDATABASE; STDOUT-02 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-02/output.txt DOES_NOT_RETURN CONTROLLED_EXIT Environment variable defining test value. NONE $SS_TC_ROOT/testData/pishu_unpaint.bin ShippingCompany /opt/stonesoup/workspace/scripts/northwind_create_northwind_zzkjwezjoilkalct.sql northwind_zzkjwezjoilkalct $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-java.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so input/good-03/jtree-good-03.tar.gz DROP DATABASE IF EXISTS $SS_DBMYSQLDATABASE; STDOUT-03 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-03/output.txt DOES_NOT_RETURN CONTROLLED_EXIT Environment variable defining test value. NONE $SS_TC_ROOT/testData/pishu_unpaint.bin shipper1 /opt/stonesoup/workspace/scripts/northwind_create_northwind_hdoltntzsantzegs.sql northwind_hdoltntzsantzegs $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-java.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so -l 2 input/good-04/jtree-good-04.tar.gz DROP DATABASE IF EXISTS $SS_DBMYSQLDATABASE; STDOUT-04 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-04/output.txt DOES_NOT_RETURN CONTROLLED_EXIT Environment variable defining test value. NONE $SS_TC_ROOT/testData/pishu_unpaint.bin NewShipper /opt/stonesoup/workspace/scripts/northwind_create_northwind_jfnfgojkkakolpiz.sql northwind_jfnfgojkkakolpiz $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-java.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so input/good-01/ input/good-02/ input/good-03/jtree-good-03.tar.gz input/good-04/jtree-good-04.tar.gz DROP DATABASE IF EXISTS $SS_DBMYSQLDATABASE; STDOUT-05-01 AND STDOUT-05-02 AND STDOUT-05-03 AND STDOUT-05-04 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-05/output1.txt good-05/output2.txt good-05/output3.txt good-05/output4.txt DOES_NOT_RETURN CONTROLLED_EXIT Environment variable defining test value. EXECUTE_UNAUTHORIZED_CODE $SS_TC_ROOT/testData/pishu_unpaint.bin BadShipper'), ('80', 'BadShipper2 /opt/stonesoup/workspace/scripts/northwind_create_northwind_tccdgfwawzbdmqht.sql northwind_tccdgfwawzbdmqht $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-java.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so input/good-03/jtree-good-03.tar.gz DROP DATABASE IF EXISTS $SS_DBMYSQLDATABASE; weakness_started_p3hEAkd9dNk7rrh35XLD AND ((NOT PERFORMER AND (db_sql_output_UvMVkbGzMu OR db_sql_output_9kUOwBrERD OR database_insert_check_nuRyqZwsDD) AND NOT timeout_jdDUDcQCU1) or (PERFORMER AND NOT ((db_sql_output_UvMVkbGzMu OR db_sql_output_9kUOwBrERD OR database_insert_check_nuRyqZwsDD) OR timeout_jdDUDcQCU1))) (NOT PERFORMER AND (db_sql_output_UvMVkbGzMu OR db_sql_output_9kUOwBrERD OR database_insert_check_nuRyqZwsDD) AND NOT timeout_jdDUDcQCU1) or (PERFORMER AND NOT ((db_sql_output_UvMVkbGzMu OR db_sql_output_9kUOwBrERD OR database_insert_check_nuRyqZwsDD) OR timeout_jdDUDcQCU1)) DOES_NOT_RETURN CONTROLLED_EXIT CONTINUED_EXECUTION logfile.txt Number of Rows Affected: 2 logfile.txt Number of Rows Affected: 4 if `mysql -u $DBMYSQLUSER --password=$DBMYSQLPASSWORD -h $DBMYSQLHOST -D $SS_DBMYSQLDATABASE -e "select * from Shippers;" | grep -q "BadShipper2\|ShipAttack"`; then true; else false; fi; None stonesoup_trace:weakness_start Environment variable defining test value. EXECUTE_UNAUTHORIZED_CODE $SS_TC_ROOT/testData/pishu_unpaint.bin ShippersRUs'), ('55', 'BadShips'), ('65', 'ShipAttack'), ('45', 'MultiShip /opt/stonesoup/workspace/scripts/northwind_create_northwind_zysgwqfruervbsdy.sql northwind_zysgwqfruervbsdy $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-java.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so -l 1 input/good-02/ DROP DATABASE IF EXISTS $SS_DBMYSQLDATABASE; weakness_started_PcTzqWfz4zjlquUei7kk AND ((NOT PERFORMER AND (db_sql_output_k3Fdri2cV7 OR db_sql_output_m5JTe1nSpW OR database_insert_check_cdBUf4aBD7) AND NOT timeout_uL6Bs3r137) or (PERFORMER AND NOT ((db_sql_output_k3Fdri2cV7 OR db_sql_output_m5JTe1nSpW OR database_insert_check_cdBUf4aBD7) OR timeout_uL6Bs3r137))) (NOT PERFORMER AND (db_sql_output_k3Fdri2cV7 OR db_sql_output_m5JTe1nSpW OR database_insert_check_cdBUf4aBD7) AND NOT timeout_uL6Bs3r137) or (PERFORMER AND NOT ((db_sql_output_k3Fdri2cV7 OR db_sql_output_m5JTe1nSpW OR database_insert_check_cdBUf4aBD7) OR timeout_uL6Bs3r137)) DOES_NOT_RETURN CONTROLLED_EXIT CONTINUED_EXECUTION logfile.txt Number of Rows Affected: 2 logfile.txt Number of Rows Affected: 4 if `mysql -u $DBMYSQLUSER --password=$DBMYSQLPASSWORD -h $DBMYSQLHOST -D $SS_DBMYSQLDATABASE -e "select * from Shippers;" | grep -q "BadShipper2\|ShipAttack"`; then true; else false; fi; None stonesoup_trace:weakness_start