From fdcdd11cb986f9c987c750078867bc11a5a3752c Mon Sep 17 00:00:00 2001 From: Miroslav Stampar Date: Thu, 25 Oct 2012 13:35:44 +0200 Subject: [PATCH] Minor update for an Issue #222 --- lib/controller/checks.py | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/lib/controller/checks.py b/lib/controller/checks.py index 92ddbba55..16573aa38 100644 --- a/lib/controller/checks.py +++ b/lib/controller/checks.py @@ -625,7 +625,7 @@ def checkFalsePositives(injection): def checkSuhoshinPatch(injection): """ - Checks for existence of Suhoshin-patch (like) protection mechanism + Checks for existence of Suhoshin-patch (and alike) protection mechanism(s) """ if injection.place == PLACE.GET: @@ -634,7 +634,8 @@ def checkSuhoshinPatch(injection): kb.injection = injection randInt = randomInt() - if not checkBooleanExpression("%d=%s%d" % (randInt, " " * SUHOSHIN_MAX_VALUE_LENGTH, randInt)): + _ = " " * SUHOSHIN_MAX_VALUE_LENGTH + if not checkBooleanExpression("%d%s=%s%d" % (randInt, _, _, randInt)): warnMsg = "parameter length constraint " warnMsg += "mechanism detected (e.g. Suhoshin patch). " warnMsg += "Potential problems in enumeration phase can be expected"