Re: bug in parsing mssql output

[HD Moore <hdm () metasploit com>]

On 6/9/2010 10:09 AM, Robin Wood wrote:
> If I run the mssql_query with true rather than false I get a lot of
>
> [-] unsupported token: 0
> [-] unsupported token: 0
> [-] unsupported token: 11
> [-] unsupported token: 0
> [-] unsupported token: 231
> [-] unsupported token: 20

Since its a stream parser, as soon as we hit one bad token, all bets are
off and we can no longer follow the stream. The current parser needs an
overhaul in order to parse all record types correctly, the MS protocol
spec indicates how big each field type is, which should be smarter than
just hardcoding a list of tested types.

-HD
_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework