LittleNellie/cipherscan
2
0
Fork 0
mirror of https://github.com/mozilla/cipherscan.git synced 2024-11-22 22:33:40 +01:00
Code Issues Releases Wiki Activity

Refuse to proceed if the final argument starts with a hyphen.

Browse Source 
This detects and prevents a specific category of user error, where an
incomplete cipherscan command line ending in an OpenSSL -option results
in cipherscan attempting to scan the target '-option:443'.
This commit is contained in:
Richard Soderberg 2015-09-05 01:01:19 -07:00
parent 3f3e22b09a
commit 28555b03f0
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
cipherscan
View File

@ -1359,6 +1359,14 @@ if [[ "$HOST" = "$PORT" ]]; then
PORT=443 PORT=443
fi fi
# Refuse to proceed if the hostname starts with a hyphen, since hostnames can't
# begin with a hyphen and this likely means we accidentally parsed an option as
# a hostname.
if [[ $HOST =~ ^- ]]; then
echo "The final argument '$TEMPTARGET' begins with a hyphen '-', which is not a valid HOST[:PORT]." 1>&2
exit 1
fi
debug "host: $HOST" debug "host: $HOST"
debug "Port: $PORT" debug "Port: $PORT"