Date: 2009-01-08 23:02 |
Priority: 3 |
Submitted By:
MadHat Unspecific (unspecific)
|
Assigned To:
Michael Wiegand (mwiegand) |
Summary: OpenVAS Client Error in XML output Coruption |
| Detailed description | When ouputing to XML, the entry for nessus/openvas breaks because it has a "/" in the name. The code is below
but I don't have the time or knowledge to fix it right now.
In the NBE it looks like this:
results|localhost|scanner.localhost|nessus/openvas (1241/tcp)
In the XML it looks like this:
<port protocol="openvas (1241/tcp" portid="1241">
<service name="nessus/openvas" method="nessus" conf="3" />
</port>
This is either doing a conversion from the NBE or doing a direct XML output.
This is from the SVN version, just updated.
Updated to revision 2170.
xml_output_ng.c:Line 498
getproto (char *str)
{
int i=0, offset=0, len=strlen (str);
char *ret = emalloc (len);
for (i=0;i<len; i++)
if (str[i] == '(') break;
i++;
for (i=0;i<len; i++)
if (str[i] == '/') break;
i++;
for (i=i;i<len; i++)
if (str[i] != ')') ret[offset++] = str[i];
else break;
ret[offset] = '\0';
return ret;
}
| |
|
Followup
| Message |
Date: 2009-01-20 15:10
Sender: Michael Wiegand
This bug has been solved in SVN revision 2275 (see
http://wald.intevation.org/plugins/scmsvn/viewcvs.php?rev=2275&am
p;root=openvas&view=rev). Slashes in service descriptions
no longer result in corrupted protocol attributes. | |
|
Attached Files:
| Name |
Download | | No Files Currently Attached | |
|
Changes:
| Field |
Old Value |
Date |
By |
| Resolution | Accepted As Bug | 2009-01-20 15:10 | mwiegand |
| close_date | 2009-01-20 15:10 | 2009-01-20 15:10 | mwiegand |
| status_id | Open | 2009-01-20 15:10 | mwiegand |
| Resolution | None | 2009-01-20 11:32 | mwiegand |
| assigned_to | none | 2009-01-20 11:32 | mwiegand | |
|