Home page logo
/

nmap-dev logo Nmap Development mailing list archives

Re: [patch] More NSE bugfixes
From: David Fifield <david () bamsoftware com>
Date: Tue, 5 Jun 2012 13:34:29 -0700

On Tue, Jun 05, 2012 at 11:21:03AM -0400, Patrick Donnelly wrote:
Hi Daniel,

On Sun, Jun 3, 2012 at 10:36 PM, Daniel Miller <bonsaiviking () gmail com> wrote:
List,

Decided to hunt bugs again, by running a debugging scan on my network
[...]

I think we'll find many of these errors are bad global accesses. I've
attached the latest output of nse_check_globals (many of the bugs in
your post are already fixed but would have been found by this script).
While scripts (threads) have their own environment and are usually
immune to problems with setting/getting a global, there still are a
few real errors you can find. For example, the ipOps library is often
accidentally indexed as ipops (subject of another thread). There are
still some scripts which are using that which you'll find in the
attached output. Another example,
scripts/broadcast-tellstick-discover.nse has "stndse" used.

Can we get a SoC student or someone to go through this list and fix the
problems?

David Fifield
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault