CERBERUS/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2026-08-04 06:40:48 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Add better error checking to http.read_auth_challenge; bail out if

Browse source 
read_token or read_token_or_quoted_string fails.
This commit is contained in:
david 2010-08-18 18:22:03 +00:00
parent d275f88183
commit f1ea488753
1 changed files with 6 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

6
nselib/http.lua
View file

@ -1431,6 +1431,9 @@ local read_auth_challenge = function(s, pos)
-- followed by an equals sign.
tmp_pos = pos
tmp_pos, name = read_token(s, tmp_pos)
if not name then
return nil
end
tmp_pos = skip_space(s, tmp_pos)
if string.sub(s, tmp_pos, tmp_pos) ~= "=" then
-- No equals sign, must be the beginning of another challenge.
@ -1440,6 +1443,9 @@ local read_auth_challenge = function(s, pos)
pos = tmp_pos
pos, val = read_token_or_quoted_string(s, pos)
if not val then
return nil
end
if params[name] then
return nil
end