mirror of
https://github.com/ail-project/ail-framework.git
synced 2024-11-27 08:17:17 +00:00
Added timeout to avoid blocking regexes
This commit is contained in:
parent
9bfb7a5fb6
commit
9e7ca84581
1 changed files with 27 additions and 10 deletions
17
bin/Regex.py
17
bin/Regex.py
|
@ -18,6 +18,7 @@ Xavier Mertens <xavier@rootshell.be>
|
|||
import time
|
||||
import os
|
||||
import re
|
||||
import signal
|
||||
from pubsublogger import publisher
|
||||
|
||||
#from bin.packages import Paste
|
||||
|
@ -26,6 +27,14 @@ from pubsublogger import publisher
|
|||
from packages import Paste
|
||||
from Helper import Process
|
||||
|
||||
class TimeoutException(Exception):
|
||||
pass
|
||||
|
||||
def timeout_handler(signum, frame):
|
||||
raise TimeoutException
|
||||
|
||||
signal.signal(signal.SIGALRM, timeout_handler)
|
||||
|
||||
# Change the path to your preferred one
|
||||
regexConfig = 'packages/regex.cfg'
|
||||
|
||||
|
@ -84,6 +93,8 @@ def search_regex(paste):
|
|||
for r in regexes:
|
||||
(tag,pattern) = r.split('||')
|
||||
|
||||
signal.alarm(max_execution_time)
|
||||
try:
|
||||
if re.findall(pattern, content, re.MULTILINE|re.IGNORECASE):
|
||||
publisher.warning('Regex match: {} ({})'.format(pattern, tag))
|
||||
# Sanitize tag to make it easy to read
|
||||
|
@ -92,6 +103,11 @@ def search_regex(paste):
|
|||
msg = 'infoleak:automatic-detection="regex-{}";{}'.format(tag, message)
|
||||
p.populate_set_out(msg, 'Tags')
|
||||
find = True
|
||||
except TimeoutException:
|
||||
print ("{0} processing timeout".format(paste.p_path))
|
||||
continue
|
||||
else:
|
||||
signal.alarm(0)
|
||||
|
||||
if find:
|
||||
#Send to duplicate
|
||||
|
@ -115,6 +131,7 @@ if __name__ == '__main__':
|
|||
|
||||
# Setup the I/O queues
|
||||
p = Process(config_section)
|
||||
max_execution_time = p.config.getint(config_section, "max_execution_time")
|
||||
|
||||
# Sent to the logging a description of the module
|
||||
publisher.info("Run Regex module ")
|
||||
|
|
Loading…
Reference in a new issue