fixup for situations with unexpected LENGTHs in multithreaded mode (e.g. UTF8 data retrieval)

stamparm · stamparm · commit 9d28ae23cae1 · 2010-07-01T14:11:45.000Z
diff --git a/lib/core/option.py b/lib/core/option.py
@@ -973,6 +973,7 @@ def __setKnowledgeBaseAttributes():
     logger.debug(debugMsg)
 
     kb.absFilePaths   = set()
+    kb.assumeBlank    = False
     kb.bannerFp       = advancedDict()
 
     kb.cache          = advancedDict()
diff --git a/lib/techniques/blind/inference.py b/lib/techniques/blind/inference.py
@@ -32,6 +32,7 @@
 from lib.core.common import getCharset
 from lib.core.common import goGoodSamaritan
 from lib.core.common import getPartRun
+from lib.core.common import readInput
 from lib.core.common import replaceNewlineTabs
 from lib.core.common import safeStringFormat
 from lib.core.convert import urlencode
@@ -289,7 +290,21 @@ def downloadThread():
                         val = getChar(curidx)
 
                         if val is None:
-                            raise sqlmapValueException, "failed to get character at index %d (expected %d total)" % (curidx, length)
+                            if not kb.assumeBlank:
+                                iolock.acquire()
+                                warnMsg = "failed to get character at index %d (expected %d total)." % (curidx, length)
+                                logger.warn(warnMsg)
+                                message   = "assume blank character? [Y/n/a]"
+                                getOutput = readInput(message, default="Y")
+                                iolock.release()
+                                if getOutput in ("a", "A"):
+                                    kb.assumeBlank = True
+                                elif not getOutput or getOutput in ("y", "Y"):
+                                    pass # do nothing
+                                else:
+                                    raise sqlmapValueException
+
+                            val = ' '
                     else:
                         break
 
