mirror of
https://github.com/sqlmapproject/sqlmap.git
synced 2026-10-12 02:22:55 +00:00
82 lines
2.9 KiB
Python
82 lines
2.9 KiB
Python
#!/usr/bin/env python
|
|
|
|
"""
|
|
Copyright (c) 2006-2026 sqlmap developers (https://sqlmap.org)
|
|
See the file 'LICENSE' for copying permission
|
|
|
|
The last branch of main()'s unhandled-exception chain in sqlmap.py: when the
|
|
experimental Python JIT is turned on, a crash gets the tier-2 advisory (Reference:
|
|
'https://github.com/python/cpython/issues/156319') instead of the automatic
|
|
issue-creation prompt - but the traceback is still printed, so a genuine sqlmap
|
|
bug is not swallowed.
|
|
|
|
Driven through a subprocess because it is main()'s own except chain under test.
|
|
"""
|
|
|
|
import os
|
|
import subprocess
|
|
import sys
|
|
import unittest
|
|
|
|
ROOT = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
|
|
|
|
# forces a crash inside init(), i.e. the same place #6117 landed, without needing a target.
|
|
# codeIsModified() is neutralized because its branch sits earlier in the chain and would
|
|
# otherwise win on any working tree with uncommitted edits (or a stale txt/checksum.md5).
|
|
DRIVER = """
|
|
import sys
|
|
sys.path.insert(0, %r)
|
|
sys.argv = ["sqlmap.py", "-u", "http://127.0.0.1/?id=1", "--batch"]
|
|
import sqlmap
|
|
import lib.core.option
|
|
sqlmap.codeIsModified = lambda: False
|
|
lib.core.option.loadPayloads = lambda: "a" < 128
|
|
sqlmap.main()
|
|
""" % ROOT
|
|
|
|
ADVISORY = "experimental Python JIT compiler is turned on"
|
|
TRACEBACK = "TypeError"
|
|
PROMPT = "automatically create a new (anonymized) issue"
|
|
|
|
|
|
def _run(jit):
|
|
env = dict(os.environ)
|
|
env["PYTHON_JIT"] = jit
|
|
proc = subprocess.Popen([sys.executable, "-c", DRIVER], cwd=ROOT, env=env,
|
|
stdin=subprocess.PIPE, stdout=subprocess.PIPE,
|
|
stderr=subprocess.STDOUT)
|
|
out = proc.communicate(input=b"")[0]
|
|
return out.decode("utf-8", "replace")
|
|
|
|
|
|
def _jitEnabled(jit):
|
|
"""Whether the interpreter actually honours PYTHON_JIT=<jit> (build-dependent)."""
|
|
code = "import sys, os; print(sys._jit.is_enabled() if hasattr(sys, '_jit') else os.environ.get('PYTHON_JIT') == '1')"
|
|
env = dict(os.environ)
|
|
env["PYTHON_JIT"] = jit
|
|
return subprocess.check_output([sys.executable, "-c", code], env=env).strip() == b"True"
|
|
|
|
|
|
class TestJitGuard(unittest.TestCase):
|
|
def test_advisory_replaces_issue_prompt_but_keeps_traceback(self):
|
|
if not _jitEnabled('1'):
|
|
self.skipTest("interpreter does not report the JIT as enabled")
|
|
|
|
out = _run('1')
|
|
self.assertIn(ADVISORY, out)
|
|
self.assertIn(TRACEBACK, out) # a real bug must still be visible in full
|
|
self.assertNotIn(PROMPT, out) # ... but not auto-filed while the JIT is on
|
|
|
|
def test_normal_path_is_untouched_without_jit(self):
|
|
if _jitEnabled('0'):
|
|
self.skipTest("JIT stays enabled with PYTHON_JIT=0 on this build")
|
|
|
|
out = _run('0')
|
|
self.assertNotIn(ADVISORY, out)
|
|
self.assertIn(TRACEBACK, out)
|
|
self.assertIn(PROMPT, out)
|
|
|
|
|
|
if __name__ == "__main__":
|
|
unittest.main()
|