From 087e29d272da918891bed360ffbedd41411725cd Mon Sep 17 00:00:00 2001 From: Miroslav Stampar Date: Thu, 22 Dec 2011 20:14:56 +0000 Subject: [PATCH] minor update --- lib/core/common.py | 5 +++++ lib/core/settings.py | 3 +++ 2 files changed, 8 insertions(+) diff --git a/lib/core/common.py b/lib/core/common.py index 036138d64..60d8eeda3 100644 --- a/lib/core/common.py +++ b/lib/core/common.py @@ -101,6 +101,7 @@ from lib.core.settings import DEFAULT_MSSQL_SCHEMA from lib.core.settings import DUMP_NEWLINE_MARKER from lib.core.settings import DUMP_CR_MARKER from lib.core.settings import DUMP_TAB_MARKER +from lib.core.settings import LARGE_OUTPUT_THRESHOLD from lib.core.settings import ML from lib.core.settings import MIN_TIME_RESPONSES from lib.core.settings import PAYLOAD_DELIMITER @@ -1333,6 +1334,10 @@ def parseUnionPage(output, unique=True): return None if output.startswith(kb.chars.start) and output.endswith(kb.chars.stop): + if len(output) > LARGE_OUTPUT_THRESHOLD: + warnMsg = "large output detected. This might take a while" + logger.warn(warnMsg) + data = BigArray() _ = [] diff --git a/lib/core/settings.py b/lib/core/settings.py index a1377bb50..4089fd32e 100644 --- a/lib/core/settings.py +++ b/lib/core/settings.py @@ -425,3 +425,6 @@ DEFAULT_COOKIE_DELIMITER = ';' # Skip unforced HashDB flush requests below the threshold number of cached items HASHDB_FLUSH_THRESHOLD = 32 + +# Warn user of possible delay due to large page dump in full UNION query injections +LARGE_OUTPUT_THRESHOLD = 1024**2