Closed ignis-sec closed 4 years ago
I've tracked this issue to its source, seems to be lxml related.
ET.fromString(xml_output)
returns None shortlyafter.
Turns out libxml added this line was added 12 years ago after CVE-2008-4226, which is limiting the maximum size that can be parsed at once to 10mb.
There seems to be no good solution for parsing from string, however ET.iterparse
is supposed to be used for parsing large xml files.
Whoops, closing the issue. Turns out it was silently rejecting a structural issue, because xml reports of incomplete scans are missing the </nmaprun>
tag at the end.
Issue Type
Faraday version
3.11.0
Component Name
Xml Plugins
Steps to reproduce
Upload any huge xml file (nmap reports, mostly, preferably +2mb)
Pip freeze
).
OS