PenTest/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2025-12-31 20:09:02 +00:00
Code Issues Projects Releases Wiki Activity

Strip carriage returns (\r) from output to prevent spoofing

Browse Source
This commit is contained in:
dmiller
2016-09-21 03:55:12 +00:00
parent d1fb502144
commit 9370f5bd5d
3 changed files with 7 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
output.cc
View File

@@ -462,7 +462,8 @@ static std::string escape_for_screen(const std::string s) {
for (unsigned int i = 0; i < s.size(); i++) {
char buf[5];
unsigned char c = s[i];
if (c == '\t' || c == '\r' || c == '\n' || (0x20 <= c && c <= 0x7e)) {
// Printable and some whitespace ok. "\r" not ok because it overwrites the line.
if (c == '\t' || c == '\n' || (0x20 <= c && c <= 0x7e)) {
r += c;
} else {
Snprintf(buf, sizeof(buf), "\\x%02X", c);