Nmap Development mailing list archives

Problems in idle-scan


From: "Gisle Vanem" <gvanem () yahoo no>
Date: Tue, 21 Oct 2014 16:43:31 +0200

I'm trying to understand the idle-scan and was trying an example
from the Nmap book at:
 http://nmap.org/book/idlescan.html

For example, I used this just to try it:
 nmap -Pn -p- -sI 10.0.0.1:22 www.riaa.com

But there seems to be some errors in the use of 'proxy->host.setHostName(name)'.
By adding some trace-code, I see that 'name' on entry of
void Target::setHostName(const char *name) is:

10.0.0.1╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠... etc.

Illegal character(s) in hostname -- replacing with '*'

FYI. the '╠' is 0xCC which my MSVC v16 in _DEBUG-mode inserts at the
end of stack buffers. And I think also when free() is called on that buffer.
Or is it 0xCD?  So where can this error or 'use after free()' occur?

--gv

_______________________________________________
Sent through the dev mailing list
http://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/

Current thread: