From c60edf7c17c348485cc3efc01b1f08b708c3b21c Mon Sep 17 00:00:00 2001 From: Bernardo Damele Date: Wed, 20 Oct 2010 22:43:02 +0000 Subject: [PATCH] Minor cosmetics --- lib/techniques/error/use.py | 2 ++ 1 file changed, 2 insertions(+) diff --git a/lib/techniques/error/use.py b/lib/techniques/error/use.py index b79efb23a..07630d3ef 100644 --- a/lib/techniques/error/use.py +++ b/lib/techniques/error/use.py @@ -56,8 +56,10 @@ def errorUse(expression, resumeValue=True): if kb.dbmsDetected: _, _, _, _, _, _, fieldToCastStr = agent.getFields(expression) nulledCastedField = agent.nullAndCastField(fieldToCastStr) + if kb.dbms == "MySQL": nulledCastedField = nulledCastedField.replace("CHAR(10000)", "CHAR(255)") #fix for that 'Subquery returns more than 1 row' + expressionReplaced = expression.replace(fieldToCastStr, nulledCastedField, 1) expressionUnescaped = unescaper.unescape(expressionReplaced) startLimiter = unescaper.unescape("'%s'" % ERROR_START_CHAR)