An Approach of Vulnerability Testing for Third-Party Component Based on Condition and Parameter Mutation

Table 2

Mutation operators of parameters of different types.

ID.	Operator	Brief description	Cases
01	PSN	Set the value of a nullable parameter to be Null	Set the value of a parameter whose value can be Null, such as, String a = Null; object b = Null;
02	IPO	Insert Parameter Operator into the value assigned to the parameter	Insert absolute value symbol or unary operator(++,−−,−,~) into the value assigned to the parameter
03	PFB	Parameter Flip Bit	Flip the value or flip the value of a bit
04	IIV	Integer Irregular Value	0, ±(1, 2^8−1, 2^8, 2^8+1, 2^16−1, 2^16, 2^16+1, 2^32−1, 2^32, 2^32+1, 2^64−1, 2^64, 2^64+1)
05	FIV	Float Irregular Value	0, ±(1, 3.402823𝐸^38, 3.402823𝐸^38+1, 3.402823𝐸^38−1, 1.79769313486232𝐸^308, 1.79769313486232𝐸^308+1, 1.79769313486232𝐸^308−1)
06	CIV	Char Irregular Value	‘A’, ‘Z’, null, ‘a’, ‘z’, ‘ ’, ‘{ ’, ‘(’, ‘[’, ‘⧵n’, ‘⧵0’, ‘⧵s’, ‘⧵d’
07	BIV	Boolean Irregular Value	Correct, Incorrect, Tru, Fal, −1, 1
08	RSV	Random String Value	Escape character string“⧵e⧵n⧵r⧵d⧵x⧵s”, “⧵xff⧵xfe⧵x00⧵x01⧵x42⧵xb5⧵nnnn⧵h9cc...”
09	LSV	Long String Value	Generate String(int n) such as: “AAA……(256)”, “AAA……(1024)”, “AAA…(15000)”
10	FSV	Format the Value of String	“%n %n……(256 chars)”, “%s %s……(1024 chars)”
11	DSV	the Value of Directory String	“..”, “../”, “..//”, “/..//AAA…”
12	USV	URL and Value of File Path String	“http://dddddddeeeeerrttttt”, “C://sytem32//Notepad.exe”, “H:⧵ABC⧵killvirus.ese”, “D:⧵AA.exeexe”
13	CSV	the Value of Command String	“;cmd.exe/c dir”, “del *.* /s”
14	SSI	SQL String Injection	“a or 1 = 1”, “delete”, “drop table users”
15	CSS	Cross Site Scripting	“<script>alert(document location);</script>”
16	PIV	Pointer Irregular Value	Null, −1, the pointer pointing to freed memory or to the end of the allocated memory
17	AIV	Array Irregular Value	Change the order of array elements into ascending, descending, or disorder order; change the value of array element to ± (maximum − 1, maximum + 1, maximum, minimum, minimum + 1, and minimum − 1); set the index of the array to (the length of array) ± 1
18	SIV	Structure Irregular Value	Set members of a structure to boundary values; Set every member to irregular values according to the member’s type