client9 / libinjection

SQL / SQLI tokenizer parser analyzer
Other
1k stars 274 forks source link

parse_operator2 and ending colon #76

Open client9 opened 10 years ago

client9 commented 10 years ago

correctness

and input with an ending colon will tokenise as operator, not type_colon due to this around line 550

 if (pos + 1 >= slen) {
     return parse_operator1(sf);
 }

no security impact