mirror of
https://github.com/ail-project/ail-framework.git
synced 2024-11-10 08:38:28 +00:00
Added timeout to avoid blocking regexes
This commit is contained in:
parent
9bfb7a5fb6
commit
9e7ca84581
1 changed files with 27 additions and 10 deletions
17
bin/Regex.py
17
bin/Regex.py
|
@ -18,6 +18,7 @@ Xavier Mertens <xavier@rootshell.be>
|
||||||
import time
|
import time
|
||||||
import os
|
import os
|
||||||
import re
|
import re
|
||||||
|
import signal
|
||||||
from pubsublogger import publisher
|
from pubsublogger import publisher
|
||||||
|
|
||||||
#from bin.packages import Paste
|
#from bin.packages import Paste
|
||||||
|
@ -26,6 +27,14 @@ from pubsublogger import publisher
|
||||||
from packages import Paste
|
from packages import Paste
|
||||||
from Helper import Process
|
from Helper import Process
|
||||||
|
|
||||||
|
class TimeoutException(Exception):
|
||||||
|
pass
|
||||||
|
|
||||||
|
def timeout_handler(signum, frame):
|
||||||
|
raise TimeoutException
|
||||||
|
|
||||||
|
signal.signal(signal.SIGALRM, timeout_handler)
|
||||||
|
|
||||||
# Change the path to your preferred one
|
# Change the path to your preferred one
|
||||||
regexConfig = 'packages/regex.cfg'
|
regexConfig = 'packages/regex.cfg'
|
||||||
|
|
||||||
|
@ -84,6 +93,8 @@ def search_regex(paste):
|
||||||
for r in regexes:
|
for r in regexes:
|
||||||
(tag,pattern) = r.split('||')
|
(tag,pattern) = r.split('||')
|
||||||
|
|
||||||
|
signal.alarm(max_execution_time)
|
||||||
|
try:
|
||||||
if re.findall(pattern, content, re.MULTILINE|re.IGNORECASE):
|
if re.findall(pattern, content, re.MULTILINE|re.IGNORECASE):
|
||||||
publisher.warning('Regex match: {} ({})'.format(pattern, tag))
|
publisher.warning('Regex match: {} ({})'.format(pattern, tag))
|
||||||
# Sanitize tag to make it easy to read
|
# Sanitize tag to make it easy to read
|
||||||
|
@ -92,6 +103,11 @@ def search_regex(paste):
|
||||||
msg = 'infoleak:automatic-detection="regex-{}";{}'.format(tag, message)
|
msg = 'infoleak:automatic-detection="regex-{}";{}'.format(tag, message)
|
||||||
p.populate_set_out(msg, 'Tags')
|
p.populate_set_out(msg, 'Tags')
|
||||||
find = True
|
find = True
|
||||||
|
except TimeoutException:
|
||||||
|
print ("{0} processing timeout".format(paste.p_path))
|
||||||
|
continue
|
||||||
|
else:
|
||||||
|
signal.alarm(0)
|
||||||
|
|
||||||
if find:
|
if find:
|
||||||
#Send to duplicate
|
#Send to duplicate
|
||||||
|
@ -115,6 +131,7 @@ if __name__ == '__main__':
|
||||||
|
|
||||||
# Setup the I/O queues
|
# Setup the I/O queues
|
||||||
p = Process(config_section)
|
p = Process(config_section)
|
||||||
|
max_execution_time = p.config.getint(config_section, "max_execution_time")
|
||||||
|
|
||||||
# Sent to the logging a description of the module
|
# Sent to the logging a description of the module
|
||||||
publisher.info("Run Regex module ")
|
publisher.info("Run Regex module ")
|
||||||
|
|
Loading…
Reference in a new issue