client9 / libinjection

SQL / SQLI tokenizer parser analyzer
Other
1k stars 274 forks source link

Pass the correct pointer to memmem() #131

Open wenchuan opened 7 years ago

wenchuan commented 7 years ago

In parse_money(), if there is a "$foobar$", it calls memmem() to find it again. Wrong pointer can cause itself to backtrack in a dead loop and hang the entire process.