kayos/zgrab2
1
0
Fork 0
Code Issues 1 Pull Requests Packages Projects Releases Wiki Activity

Adds bounds checks to avoid panic when value-less attributes have the correct name to be recorded directly in results.

Browse Source
This commit is contained in:
Clayton Zimmerman 2018-07-11 14:57:22 -04:00
parent 9d1265db8b
commit dc3d7d1cb7
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
modules/ipp/scanner.go
View File

@ -391,7 +391,7 @@ func (scanner *Scanner) tryReadAttributes(resp *http.Response, scan *scan) *zgra
scan.results.Attributes = append(scan.results.Attributes, attrs...)
for _, attr := range scan.results.Attributes {
if attr.Name == CupsVersion && scan.results.AttributeCUPSVersion == "" {
if attr.Name == CupsVersion && scan.results.AttributeCUPSVersion == "" && len(attr.Values) > 0 {
scan.results.AttributeCUPSVersion = string(attr.Values[0].Bytes)
}
if attr.Name == VersionsSupported && len(scan.results.AttributeIPPVersions) == 0 {
@ -399,7 +399,7 @@ func (scanner *Scanner) tryReadAttributes(resp *http.Response, scan *scan) *zgra
scan.results.AttributeIPPVersions = append(scan.results.AttributeIPPVersions, string(v.Bytes))
}
}
if attr.Name == PrinterURISupported {
if attr.Name == PrinterURISupported && len(attr.Values) > 0 {
scan.results.AttributePrinterURIs = append(scan.results.AttributePrinterURIs, string(attr.Values[0].Bytes))
}
}