PenTest/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2025-12-17 13:09:02 +00:00
Code Issues Projects Releases Wiki Activity

Fix to http.validate_options from Sebastian Prengel: The cookies table

Browse Source 
was being iterated over incorrectly.

Also from Sebastian: add "expires" to the list of handled keys in
validate_options.
This commit is contained in:
david
2011-02-24 20:16:06 +00:00
parent b31a8aa875
commit 61543b681e
2 changed files with 10 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
CHANGELOG
View File

@@ -1,5 +1,8 @@
# Nmap Changelog ($Id$); -*-text-*- # Nmap Changelog ($Id$); -*-text-*-
o [NSE] Fixed http.validate_options when handling a cookie table.
[Sebastian Prengel]
o [NSE] Added quake3-master-getservers, which gets a list of live o [NSE] Added quake3-master-getservers, which gets a list of live
Quake 3 servers from a master server. (It also works for many Quake 3 servers from a master server. (It also works for many
similar games.) [Toni Ruottu] similar games.) [Toni Ruottu]

9
nselib/http.lua
View File

@@ -266,8 +266,8 @@ local function validate_options(options)
end end
elseif(key == 'cookies') then elseif(key == 'cookies') then
if(type(value) == 'table') then if(type(value) == 'table') then
for cookie in pairs(value) do for _, cookie in ipairs(value) do
for cookie_key, cookie_value in pairs(value) do for cookie_key, cookie_value in pairs(cookie) do
if(cookie_key == 'name') then if(cookie_key == 'name') then
if(type(cookie_value) ~= 'string') then if(type(cookie_value) ~= 'string') then
stdnse.print_debug(1, "http: options.cookies[i].name should be a string") stdnse.print_debug(1, "http: options.cookies[i].name should be a string")
@@ -283,6 +283,11 @@ local function validate_options(options)
stdnse.print_debug(1, "http: options.cookies[i].path should be a string") stdnse.print_debug(1, "http: options.cookies[i].path should be a string")
bad = true bad = true
end end
elseif(cookie_key == 'expires') then
if(type(cookie_value) ~= 'string') then
stdnse.print_debug(1, "http: options.cookies[i].expires should be a string")
bad = true
end
else else
stdnse.print_debug(1, "http: Unknown field in cookie table: %s", cookie_key) stdnse.print_debug(1, "http: Unknown field in cookie table: %s", cookie_key)
bad = true bad = true