From 5d041957767757b2b9ab6d4c6bf6d3e430d8770c Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jan=20St=C3=A1rek?= Date: Mon, 28 Oct 2019 10:59:52 +0100 Subject: [PATCH] Decode boofuzz bytes into ascii The whole header part is forced to be ascii, so the decode should be quite safe. --- fuzzer/src/request_build_helper.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/fuzzer/src/request_build_helper.py b/fuzzer/src/request_build_helper.py index d8e8e81..3da60b2 100644 --- a/fuzzer/src/request_build_helper.py +++ b/fuzzer/src/request_build_helper.py @@ -66,7 +66,7 @@ class RequestBuildHelper(object): for uri_parameter in uri_parameters: parameter_name = uri_parameter["Name"] if parameter_name not in already_used_parameters and uri_parameter["Location"] == "Query": - prefix = "?" if "?" not in s_render() else "&" + prefix = "?" if "?" not in s_render().decode('ascii', 'ignore') else "&" name = "URI attribute, default value: " + uri + ", id: " + next(id_generator) s_http_string(prefix + parameter_name + "=", fuzzable=False, encoding=EncodingTypes.ascii, name=name) RequestBuildHelper._append_parameter(parameter_name, id_generator, uri_parameters, fuzzable)