File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change @@ -702,7 +702,7 @@ def _():
702702 break
703703
704704 if retVal is None :
705- warnMsg = "false positive injection point detected"
705+ warnMsg = "false positive or unexploitable injection point detected"
706706 logger .warn (warnMsg )
707707
708708 kb .injection = popValue ()
@@ -715,20 +715,27 @@ def checkSuhosinPatch(injection):
715715 """
716716
717717 if injection .place == PLACE .GET :
718+ debugMsg = "checking for parameter length "
719+ debugMsg += "constrainting mechanisms"
720+ logger .debug (debugMsg )
721+
718722 pushValue (kb .injection )
719723
720724 kb .injection = injection
721725 randInt = randomInt ()
722726
723727 if not checkBooleanExpression ("%d=%s%d" % (randInt , ' ' * SUHOSIN_MAX_VALUE_LENGTH , randInt )):
724- warnMsg = "parameter length constraint "
728+ warnMsg = "parameter length constrainting "
725729 warnMsg += "mechanism detected (e.g. Suhosin patch). "
726730 warnMsg += "Potential problems in enumeration phase can be expected"
727731 logger .warn (warnMsg )
728732
729733 kb .injection = popValue ()
730734
731735def checkFilteredChars (injection ):
736+ debugMsg = "checking for filtered characters"
737+ logger .debug (debugMsg )
738+
732739 pushValue (kb .injection )
733740
734741 kb .injection = injection
You can’t perform that action at this time.
0 commit comments