Re: [sqlmap-users] bug: --threads fails

[Miroslav S. <mir...@gm...>]

Hi.

Thank you for your report. After some researching we've found two
serious bugs in sqlmap threading, and we've fixed them accordingly.
One of them was related to non-thread safe usage of difflib, as could
be suspected from your report. Please, update your sqlmap to the
latest development version.

Kind regards,
Miroslav Stampar

On Sat, Mar 6, 2010 at 3:54 PM, Kasper Føns <th...@ma...> wrote:
> Hell sqlmap users.
>
> I am using your software on Windows 7.
>
> I just tried fetching column definitions from a table using --threads=30.
>
> It found the first column name, but afterwards this happened:
> [15:51:20] [INFO] retrieving the length of query output
> [15:51:20] [INFO] retrieved: 7
> [15:51:23] [INFO] starting 7 threads
> [15:51:23] [INFO] retrieved: [15:51:24] [ERROR] thread 7: unhandled
> exception in sqlmap/0.7, please copy the command line and the following
> text and send by e-mail to sql...@li.... The
> developer will fix it as soon as possible:
> sqlmap version: 0.7
> Python version: 2.6.1
> Operating system: win32
> Traceback (most recent call last):
>   File "lib\techniques\blind\inference.pyc", line 157, in downloadThread
>   File "lib\techniques\blind\inference.pyc", line 106, in getChar
>   File "lib\request\connect.pyc", line 279, in queryPage
>   File "lib\request\comparison.pyc", line 72, in comparison
>   File "difflib.pyc", line 660, in ratio
>   File "difflib.pyc", line 494, in get_matching_blocks
>   File "difflib.pyc", line 439, in find_longest_match
> IndexError: string index out of range
> [15:51:27] [INFO] partially retrieved: wwtwww
> [15:51:27] [ERROR] something unexpected happen into the threads
>
> [*] shutting down at: 15:51:27
>
> The value that it should find was "int<10>".
>
> Should I provide more information?
>
> ------------------------------------------------------------------------------
> Download Intel&#174; Parallel Studio Eval
> Try the new software tools for yourself. Speed compiling, find bugs
> proactively, and fine-tune applications for parallel performance.
> See why Intel Parallel Studio got high marks during beta.
> http://p.sf.net/sfu/intel-sw-dev
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>



-- 
Miroslav Stampar

E-mail / Jabber: miroslav.stampar (at) gmail.com
Mobile: +385921010204 (HR 0921010204)
PGP Key ID: 0xB5397B1B