This test creates a connection to the PGSQL database, and creates a query string based on data in an environment variable. This data is not checked for special elements, however, and it is possible to construct a query string that performs unexpected data retrievals or modifications. jena.rdfcompare:arq.sparql:jena.rdfparse:jena.rdfcat:arq.wwwenc:jena.rdfcopy:arq.wwwdec:jena.schemagen:jena.turtle $SS_TC_ROOT/$SS_TC_INSTALL/*:$SS_TC_DEPS/java/stonesoup/database/postgres/*:$SS_TC_DEPS/java/stonesoup/socket/*:$SS_TC_DEPS/java/stonesoup/lttng/lttng-stonesoup-0.1.jar UNSPECIFIED UNSPECIFIED java $SS_JAVA_OPTS -Djava.library.path=$SS_TC_DEPS/lib64/ -Xmx1024M -Dlog4j.configuration=file:$SS_TC_ROOT/$SS_TC_INSTALL/jena-log4j.properties -cp "$SS_JAVA_CLASSPATH" env ANT_HOME=$SS_TC_DEPS/ant ant $SS_ANT_OPTS -Dstonesoup.database.postgres.required=yes -Dstonesoup.hibernate.postgres.required=no -Dstonesoup.hibernate.mysql.required=no -Dstonesoup.database.mysql.required=no -Dstonesoup.socket.required=yes -lib $SS_TC_DEPS/java/stonesoup/lttng/lttng-stonesoup-0.1.jar -Dstonesoup.socket.lib.dir="$SS_TC_DEPS/java/stonesoup/socket" -Dstonesoup.hibernate.mysql.lib.dir="$SS_TC_DEPS/java/stonesoup/hibernate/mysql" -Dstonesoup.hibernate.postgres.lib.dir="$SS_TC_DEPS/java/stonesoup/hibernate/postgres" -Dstonesoup.database.mysql.lib.dir="$SS_TC_DEPS/java/stonesoup/database/mysql" -Dstonesoup.database.postgres.lib.dir="$SS_TC_DEPS/java/stonesoup/database/postgres" -Dbin.lib.dir="$SS_TC_ROOT/$SS_TC_INSTALL" -Ddependencies.dir="$SS_TC_DEPS/java/jena" -Dstonesoup.lttng.lib.dir="$SS_TC_DEPS/java/stonesoup/lttng" -Dstonesoup.lttng.dummy.lib.dir="$SS_TC_DEPS/java/stonesoup/lttng-dummy" jar Environment variable defining test value. NONE /opt/stonesoup/workspace/scripts/northwind_create_northwindlower_ewgshizpfajnqygj.sql northwindlower_ewgshizpfajnqygj $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-java.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so jena.rdfcompare $SS_TC_ROOT/testData/good-01/example.xml $SS_TC_ROOT/testData/good-01/example2.xml RDF/XML RDF/XML DROP DATABASE IF EXISTS $SS_DBPGDATABASE; GOOD-01 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-01/output.txt DOES_NOT_RETURN CONTROLLED_EXIT Environment variable defining test value. NONE /opt/stonesoup/workspace/scripts/northwind_create_northwindlower_yxpvjzpnuplqhdwy.sql northwindlower_yxpvjzpnuplqhdwy $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-java.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so arq.sparql --data=$SS_TC_ROOT/testData/good-02/vc-db-1.rdf --query=$SS_TC_ROOT/testData/good-02/q1.rq DROP DATABASE IF EXISTS $SS_DBPGDATABASE; GOOD-02 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-02/output.txt DOES_NOT_RETURN CONTROLLED_EXIT Environment variable defining test value. NONE /opt/stonesoup/workspace/scripts/northwind_create_northwindlower_mxcogxvvjvpzexho.sql northwindlower_mxcogxvvjvpzexho $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-java.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so arq.sparql --data=$SS_TC_ROOT/testData/good-03/vc-db-1.rdf --query=$SS_TC_ROOT/testData/good-03/q-bp1.rq DROP DATABASE IF EXISTS $SS_DBPGDATABASE; GOOD-03 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-03/output.txt DOES_NOT_RETURN CONTROLLED_EXIT Environment variable defining test value. NONE /opt/stonesoup/workspace/scripts/northwind_create_northwindlower_kunmpubfulzzuqxg.sql northwindlower_kunmpubfulzzuqxg $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-java.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so jena.rdfparse $SS_TC_ROOT/testData/good-04/example.xml DROP DATABASE IF EXISTS $SS_DBPGDATABASE; GOOD-04 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-04/output.txt DOES_NOT_RETURN CONTROLLED_EXIT Environment variable defining test value. NONE /opt/stonesoup/workspace/scripts/northwind_create_northwindlower_mqhetgwcgmxgooni.sql northwindlower_mqhetgwcgmxgooni $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-java.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so jena.rdfcat -x $SS_TC_ROOT/testData/good-05/example.xml $SS_TC_ROOT/testData/good-05/example2.xml DROP DATABASE IF EXISTS $SS_DBPGDATABASE; GOOD-01 AND GOOD-02 AND GOOD-03 AND GOOD-04 AND GOOD-05 GOOD-06 AND GOOD-07 AND GOOD-08 AND GOOD-09 AND GOOD-10 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT <rdf:Description rdf:about="http://somewhere/RebeccaSmith/"> <vcard:N rdf:parseType="Resource"> <vcard:Family>Smith</vcard:Family> <vcard:Given>Rebecca</vcard:Given> </vcard:N> <vcard:FN>Becky Smith</vcard:FN> <vcard:N rdf:parseType="Resource"> <vcard:Family>Smith</vcard:Family> <vcard:Given>Rebecca</vcard:Given> </rdf:Description> DOES_NOT_RETURN CONTROLLED_EXIT Environment variable defining test value. NONE /opt/stonesoup/workspace/scripts/northwind_create_northwindlower_pszmdegtsjsgroyy.sql northwindlower_pszmdegtsjsgroyy $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-java.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so jena.turtle --check --strict good-06/example1.ttl DROP DATABASE IF EXISTS $SS_DBPGDATABASE; GOOD-06-01 AND GOOD-06-02 AND GOOD-06-03 AND GOOD-06-04 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-06/output1.txt good-06/output2.txt good-06/output3.txt good-06/output4.txt DOES_NOT_RETURN CONTROLLED_EXIT Environment variable defining test value. NONE /opt/stonesoup/workspace/scripts/northwind_create_northwindlower_cbxexrpscwrgmlbd.sql northwindlower_cbxexrpscwrgmlbd $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-java.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so jena.schemagen --includeSource --noheader -i good-07/example1.ttl DROP DATABASE IF EXISTS $SS_DBPGDATABASE; GOOD-07 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-07/output.txt DOES_NOT_RETURN CONTROLLED_EXIT Environment variable defining test value. NONE /opt/stonesoup/workspace/scripts/northwind_create_northwindlower_bmpqyyggsxpnvvqc.sql northwindlower_bmpqyyggsxpnvvqc $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-java.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so arq.rset --in XML --results text --file $SS_TC_ROOT/testData/good-08/results.xml DROP DATABASE IF EXISTS $SS_DBPGDATABASE; GOOD-08 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-08/output.txt DOES_NOT_RETURN CONTROLLED_EXIT Environment variable defining test value. NONE /opt/stonesoup/workspace/scripts/northwind_create_northwindlower_wnqaeugcdnktsxts.sql northwindlower_wnqaeugcdnktsxts $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-java.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so jena.rdfcopy good-09/example1.ttl TURTLE RDF/XML DROP DATABASE IF EXISTS $SS_DBPGDATABASE; GOOD-09-01 AND GOOD-09-02 AND GOOD-09-03 AND GOOD-09-04 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-09/output1.txt good-09/output2.txt good-09/output3.txt good-09/output4.txt DOES_NOT_RETURN CONTROLLED_EXIT Environment variable defining test value. NONE /opt/stonesoup/workspace/scripts/northwind_create_northwindlower_mxevokflwihulerv.sql northwindlower_mxevokflwihulerv $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-java.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so arq.qexpr '5 != 20' DROP DATABASE IF EXISTS $SS_DBPGDATABASE; GOOD-10 AND NOT TIMEOUT AND NOT CONTROLLED_EXIT good-10/output.txt DOES_NOT_RETURN CONTROLLED_EXIT Environment variable defining test value. EXECUTE_UNAUTHORIZED_CODE /opt/stonesoup/workspace/scripts/northwind_create_northwindlower_miakmwmctjyjpydd.sql northwindlower_miakmwmctjyjpydd $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-java.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so arq.qexpr '5 != 20' DROP DATABASE IF EXISTS $SS_DBPGDATABASE; weakness_started_Qzw1tVjgxjpLNAF6eQ3H AND ((NOT PERFORMER AND (db_sql_output_I2KuaDi4zD OR db_sql_output_GImXAdTcU7 OR database_insert_check_peZ21IhVeA) AND NOT timeout_Xqg2prMVKt) or (PERFORMER AND NOT ((db_sql_output_I2KuaDi4zD OR db_sql_output_GImXAdTcU7 OR database_insert_check_peZ21IhVeA) OR timeout_Xqg2prMVKt OR controlled_exit_wimuQlzN6l))) (NOT PERFORMER AND (db_sql_output_I2KuaDi4zD OR db_sql_output_GImXAdTcU7 OR database_insert_check_peZ21IhVeA) AND NOT timeout_Xqg2prMVKt) or (PERFORMER AND NOT ((db_sql_output_I2KuaDi4zD OR db_sql_output_GImXAdTcU7 OR database_insert_check_peZ21IhVeA) OR timeout_Xqg2prMVKt OR controlled_exit_wimuQlzN6l)) DOES_NOT_RETURN CONTROLLED_EXIT CONTINUED_EXECUTION logfile.txt Number of Rows Affected: 2 logfile.txt Number of Rows Affected: 4 export PGPASSWORD=$DBPGPASSWORD; if `psql -U $DBPGUSER -h $DBPGHOST -d $SS_DBPGDATABASE -c "select * from shippers;" | grep -q "BadShipper2\|ShipAttack"`; then true; else false; fi; None stonesoup_trace:weakness_start Environment variable defining test value. EXECUTE_UNAUTHORIZED_CODE /opt/stonesoup/workspace/scripts/northwind_create_northwindlower_irikpfasspyskgko.sql northwindlower_irikpfasspyskgko $SS_TC_ROOT/logs/execute/lttng $SS_TC_DEPS/lib64/liblttng-stonesoup-java.so:$SS_TC_DEPS/lib64/liblttng-ust-fork.so jena.schemagen --includeSource --noheader -i good-07/example1.ttl DROP DATABASE IF EXISTS $SS_DBPGDATABASE; weakness_started_0rTojtKfFqxCCvTUypBd AND ((NOT PERFORMER AND (db_sql_output_NUTvu5P7km OR db_sql_output_6BXfQXuU2u OR database_insert_check_8JFi4f5Y87) AND NOT timeout_gpfmNCqMpU) or (PERFORMER AND NOT ((db_sql_output_NUTvu5P7km OR db_sql_output_6BXfQXuU2u OR database_insert_check_8JFi4f5Y87) OR timeout_gpfmNCqMpU OR controlled_exit_AvNVXHimkh))) (NOT PERFORMER AND (db_sql_output_NUTvu5P7km OR db_sql_output_6BXfQXuU2u OR database_insert_check_8JFi4f5Y87) AND NOT timeout_gpfmNCqMpU) or (PERFORMER AND NOT ((db_sql_output_NUTvu5P7km OR db_sql_output_6BXfQXuU2u OR database_insert_check_8JFi4f5Y87) OR timeout_gpfmNCqMpU OR controlled_exit_AvNVXHimkh)) DOES_NOT_RETURN CONTROLLED_EXIT CONTINUED_EXECUTION logfile.txt Number of Rows Affected: 2 logfile.txt Number of Rows Affected: 4 export PGPASSWORD=$DBPGPASSWORD; if `psql -U $DBPGUSER -h $DBPGHOST -d $SS_DBPGDATABASE -c "select * from shippers;" | grep -q "BadShipper2\|ShipAttack"`; then true; else false; fi; None stonesoup_trace:weakness_start