From 0f2634c4b0a3eba419504c6ba12c30900b11ddfb Mon Sep 17 00:00:00 2001 From: Bernardo Damele Date: Thu, 20 Jan 2011 22:01:21 +0000 Subject: [PATCH] Minor bug fix to properly cast to string also the COUNT() query in error-based technique (as it's concatenated to random strings for identification in page response) and int-string concatenation is not supported in all DBMS (like Oracle) --- lib/techniques/error/use.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/lib/techniques/error/use.py b/lib/techniques/error/use.py index 9f547b93e..dd62a25f4 100644 --- a/lib/techniques/error/use.py +++ b/lib/techniques/error/use.py @@ -219,7 +219,8 @@ def errorUse(expression, expected=None, resumeValue=True, dump=False): if not stopLimit: if not count or not count.isdigit(): - count = __oneShotErrorUse(countedExpression, expressionFields) + _, _, _, _, _, _, countedExpressionFields, _ = agent.getFields(countedExpression) + count = __oneShotErrorUse(countedExpression, countedExpressionFields) if isNumPosStrValue(count): stopLimit = int(count)