Re: script bug

[Brandon Enright <bmenrigh () ucsd edu>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Ron, comments inline.

On Thu, 21 Jan 2010 16:27:29 -0500
"MELDAU, RONALD J" <RMELDAU () scana com> wrote:

> I am running 5.20 on Windows XP.  I do a basic -sC -script=all.  It
> blows up on one of the scripts.  I think favicon.nse.  Hope this
> helps.
[...snip...]
> NSE: http-enum: Attempting to parse fingerprint file
> nselib/data/http-fingerprints NSE: http-enum against 10.99.24.140:443
> threw an error! C:\Program Files\Nmap\scripts\http-enum.nse:198: bad
> argument #1 to 'lines' (nselib/data/h ttp-fingerprints: No such file
> or directory) stack traceback:
>         [C]: in function 'lines'
>         C:\Program Files\Nmap\scripts\http-enum.nse:198: in function
> 'get_fingerprints' C:\Program Files\Nmap\scripts\http-enum.nse:234:
> in function <C:\Program Files\Nma p\scripts\http-enum.nse:229>
>         (tail call): ?

I've been getting the same error out of SVN for a while now:

NSE: http-enum against a.b.229.21:80 threw an error!
...menrigh/flexmap/nmap/svn/nmap//scripts/http-enum.nse:198: bad argument #1 to 'lines' (nselib/data/http-fingerprints: 
No such file or directory)
stack traceback:
        [C]: in function 'lines'
        ...menrigh/flexmap/nmap/svn/nmap//scripts/http-enum.nse:198: in function 'get_fingerprints'
        ...menrigh/flexmap/nmap/svn/nmap//scripts/http-enum.nse:234: in function 
<...menrigh/flexmap/nmap/svn/nmap//scripts/http-enum.nse:229>
        (tail call): ?

I do have the http-fingerprints file but I'm executing Nmap with the
- --datadir directive and I suspect that just isn't being taken into
account by this script.  I haven't looked into it any further.  This
isn't the source of your crash.

[...snip...]
> NSE: http-favicon against 10.99.24.140:443 threw an error!
> C:\Program Files\Nmap\scripts\http-favicon.nse:141: variable
> 'dirname' is not declared stack traceback:
>         [C]: in function 'error'
>         C:\Program Files\Nmap\nselib/strict.lua:68: in function
> <C:\Program Files\Nmap\nse lib/strict.lua:59>
>         C:\Program Files\Nmap\scripts\http-favicon.nse:141: in
> function 'parse_url_relativ e'
>         C:\Program Files\Nmap\scripts\http-favicon.nse:85: in
> function <C:\Program Files\N map\scripts\http-favicon.nse:48>
>         (tail call): ?

This seems a bit odd to me.  I haven't seen this.  It isn't the source
of your crash though.


[...snip...]
> NSE: Finished banner against 10.99.24.140:445.
> Assertion failed: bytesleft > 0, file .\src\nsock_core.c, line 516

This is the source of your crash.  David tracked down and fixed this,
see: http://seclists.org/nmap-dev/2010/q1/209

Unless you have a Windows build environment setup you'll have to wait a
bit.  Your other option would be to check out the latest scripts/ and
nselib/ directory from SVN and then replace your 5.20 directories.

> This application has requested the Runtime to terminate it in an
> unusual way. Please contact the application's support team for more
> information.
>
>
> Ron Meldau


Thanks for the report Ron,

Brandon

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.11 (GNU/Linux)

iEYEARECAAYFAktZ7KUACgkQqaGPzAsl94LD7ACgtwx4yEbSjE8doPzcVRYTdjzo
jsIAn06eDbdrgl622UTBlMavC+nON7Cq
=kZPu
-----END PGP SIGNATURE-----
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/