crt0mega
/
skipfish
1
0
Fork 0
Code Issues 1 Pull Requests Projects Releases Wiki Activity

1.82b: NULL pointer in is_javascript() fixed.

This commit is contained in:
Steve Pinkham 2011-01-10 14:17:42 -05:00
parent a3473417d9
commit 0717375d0a
4 changed files with 11 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
ChangeLog
View File

@ -1,3 +1,8 @@
Version 1.82b:
--------------
- NULL pointer in is_javascript() fixed.
Version 1.81b:
--------------

2
Makefile
View File

@ -20,7 +20,7 @@
#
PROGNAME = skipfish
VERSION = 1.81b
VERSION = 1.82b
OBJFILES = http_client.c database.c crawler.c analysis.c report.c
INCFILES = alloc-inl.h string-inl.h debug.h types.h http_client.h \

5
analysis.c
View File

@ -1176,7 +1176,10 @@ static u8 is_javascript(struct http_response* res) {
end = text + strcspn((char*)text, "\r\n");
} else if (text[1] == '*') {
end = (u8*)strstr((char*)text + 2, "*/");
if (end) end += 2;
if (end) end += 2; else {
res->js_type = 1;
return 0;
}
} else {
res->js_type = 1;
return 0;

2
crawler.c
View File

@ -1184,7 +1184,7 @@ static u8 inject_check7_callback(struct http_request* req,
misc[7] = 9 1 - (or orig 0 0 - -)
If misc[0] == misc[1], but misc[0] != misc[2], probable (numeric) SQL
injection. Ditto for misc[2] == misc[6], but misc[6] != misc[7].
injection. Ditto for misc[1] == misc[6], but misc[6] != misc[7].
If misc[3] != misc[4] and misc[3] != misc[5], probable text SQL
injection.