Fixes sqlmapproject#1277

stamparm · stamparm · commit b02be9674f8c · 2015-06-26T10:11:34.000+02:00
diff --git a/lib/core/agent.py b/lib/core/agent.py
@@ -174,7 +174,10 @@ def _(pattern, repl, string):
                     while True:
                         _ = re.search(r"\\g<([^>]+)>", repl)
                         if _:
-                            repl = repl.replace(_.group(0), match.group(int(_.group(1)) if _.group(1).isdigit() else _.group(1)))
+                            try:
+                                repl = repl.replace(_.group(0), match.group(int(_.group(1)) if _.group(1).isdigit() else _.group(1)))
+                            except IndexError:
+                                break
                         else:
                             break
                     retVal = string[:match.start()] + repl + string[match.end():]
@@ -185,6 +188,7 @@ def _(pattern, repl, string):
                 retVal = _(regex, "%s=%s" % (parameter, self.addPayloadDelimiters(newValue.replace("\\", "\\\\"))), paramString)
             else:
                 retVal = _(r"(\A|\b)%s=%s(\Z|%s|%s|\s)" % (re.escape(parameter), re.escape(origValue), DEFAULT_GET_POST_DELIMITER, DEFAULT_COOKIE_DELIMITER), "%s=%s\g<2>" % (parameter, self.addPayloadDelimiters(newValue.replace("\\", "\\\\"))), paramString)
+
             if retVal == paramString and urlencode(parameter) != parameter:
                 retVal = _(r"(\A|\b)%s=%s" % (re.escape(urlencode(parameter)), re.escape(origValue)), "%s=%s" % (urlencode(parameter), self.addPayloadDelimiters(newValue.replace("\\", "\\\\"))), paramString)
 
