PenTest/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2025-12-09 14:11:29 +00:00
Code Issues Projects Releases Wiki Activity

Fix for two RTSP request assembly defects introduced in r37474:

Browse Source 
* Adds missing header-terminating empty line to the request string
* Rectifies a code crash when the header table is empty
Fixes #1781, closes #1796
This commit is contained in:
nnposter
2019-11-06 22:15:32 +00:00
parent 97ea08b8c2
commit 08a6d8db4b
2 changed files with 7 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
CHANGELOG
View File

@@ -10,6 +10,9 @@ o [Windows] Add support for the new loopback behavior in Npcap 0.9983. This
Adapter to be installed, which was a source of problems for some users. Adapter to be installed, which was a source of problems for some users.
[Daniel Miller] [Daniel Miller]
o [NSE][GH#1781][GH#1796] The RTSP library was not correctly generating request
strings. [nnposter]
o [NSE][GH#1706] VNC handshakes were failing with insert position out of bounds o [NSE][GH#1706] VNC handshakes were failing with insert position out of bounds
error. [nnposter] error. [nnposter]

7
nselib/rtsp.lua
View File

@@ -80,10 +80,11 @@ Request = {
local req = { local req = {
("%s %s RTSP/1.0"):format(self.method, self.url), ("%s %s RTSP/1.0"):format(self.method, self.url),
("CSeq: %d"):format(self.cseq), ("CSeq: %d"):format(self.cseq)
table.unpack(self.headers),
""
} }
table.move(self.headers, 1, #self.headers, #req + 1, req)
table.insert(req, "")
table.insert(req, "")
return table.concat(req, "\r\n") return table.concat(req, "\r\n")
end, end,
} }