sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2024-11-22 09:36:35 +03:00
Code Issues Packages Projects Releases Wiki Activity

fix for a bug reported by ahmed@isecur1ty.org (TypeError: unsupported operand type(s) for -: 'float' and 'NoneType')

Browse Source
This commit is contained in:
Miroslav Stampar 2011-02-05 14:17:28 +00:00
parent 4df8a03c04
commit 412a97b7fe
2 changed files with 6 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
doc/THANKS
View File

@ -343,6 +343,7 @@ Uemit Seren <uemit.seren@gmail.com>
Ahmed Shawky <ahmed@isecur1ty.org> Ahmed Shawky <ahmed@isecur1ty.org>
for reporting a major bug with improper handling of parameter values for reporting a major bug with improper handling of parameter values
for reporting a bug
Brian Shura <bshura@appsecconsulting.com> Brian Shura <bshura@appsecconsulting.com>
for reporting a bug for reporting a bug

8
lib/techniques/inband/union/test.py
View File

@ -31,6 +31,8 @@ from lib.core.enums import DBMS
from lib.core.enums import PAYLOAD from lib.core.enums import PAYLOAD
from lib.core.settings import FROM_TABLE from lib.core.settings import FROM_TABLE
from lib.core.settings import UNION_STDEV_COEFF from lib.core.settings import UNION_STDEV_COEFF
from lib.core.settings import MIN_RATIO
from lib.core.settings import MAX_RATIO
from lib.core.settings import MIN_STATISTICAL_RANGE from lib.core.settings import MIN_STATISTICAL_RANGE
from lib.core.settings import MIN_UNION_RESPONSES from lib.core.settings import MIN_UNION_RESPONSES
from lib.core.unescaper import unescaper from lib.core.unescaper import unescaper
@ -52,14 +54,14 @@ def __findUnionCharCount(comment, place, parameter, value, prefix, suffix, where
if abs(upperCount - lowerCount) < MIN_UNION_RESPONSES: if abs(upperCount - lowerCount) < MIN_UNION_RESPONSES:
upperCount = lowerCount + MIN_UNION_RESPONSES upperCount = lowerCount + MIN_UNION_RESPONSES
min_, max_ = None, None min_, max_ = MAX_RATIO, MIN_RATIO
for count in range(lowerCount, upperCount+1): for count in range(lowerCount, upperCount+1):
query = agent.forgeInbandQuery('', -1, count, comment, prefix, suffix, conf.uChar) query = agent.forgeInbandQuery('', -1, count, comment, prefix, suffix, conf.uChar)
payload = agent.payload(place=place, parameter=parameter, newValue=query, where=where) payload = agent.payload(place=place, parameter=parameter, newValue=query, where=where)
page, _ = Request.queryPage(payload, place=place, content=True, raise404=False) page, _ = Request.queryPage(payload, place=place, content=True, raise404=False)
ratio = comparison(page, True) ratio = comparison(page, True) or MIN_RATIO
ratios.append(ratio) ratios.append(ratio)
min_, max_ = min(min_ or ratio, ratio), max(max_ or ratio, ratio) min_, max_ = min(min_, ratio), max(max_, ratio)
items.append((count, ratio)) items.append((count, ratio))
ratios.pop(ratios.index(min_)) ratios.pop(ratios.index(min_))