CERBERUS/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2026-08-03 22:29:06 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Fix for bug in cookie parsing code reported by Ron Bowes;

Browse source 
http.lua:757: attempt to perform arithmetic on local 'pos' (a nil value)
This commit is contained in:
patrik 2012-06-07 16:06:58 +00:00
parent 7b6b1f691c
commit 55572542ef
1 changed files with 10 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

11
nselib/http.lua
View file

@ -748,12 +748,21 @@ local function parse_set_cookie(s)
if string.sub(s, pos, pos) == "\"" then
pos, value = get_quoted_string(s, pos)
else
if string.lower(name) == "expires" then
-- account for the possibility of the expires attribute being empty or improperly formatted
local last_pos = pos
if string.lower(name) == "expires" then
-- For version 0 cookies we must allow one comma for "expires".
_, pos, value = string.find(s, "([^,]*,[^;,]*)[ \t]*", pos)
else
_, pos, value = string.find(s, "([^;,]*)[ \t]*", pos)
end
-- account for the possibility of the expires attribute being empty or improperly formatted
if ( not(pos) ) then
_, pos, value = s:find("([^;]*)", last_pos)
end
pos = pos + 1
end
if not value then