cariddi/scanner/errors.go

/*
==========
Cariddi
==========
This program is free software: you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License, or
(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program.  If not, see http://www.gnu.org/licenses/.

	@Repository:  https://github.com/edoardottt/cariddi

	@Author:      edoardottt, https://www.edoardoottavianelli.it

	@License: https://github.com/edoardottt/cariddi/blob/main/LICENSE

*/

package scanner

//Error struct
// ErrorName = the name that identifies the error
// Regex = The regular expression to be matched
type Error struct {
	ErrorName string
	Regex     []string
}

//ErrorMatched struct
// Error = Error struct
// Url = url in which the error is found
// Match = the string matching the regex
type ErrorMatched struct {
	Error Error
	Url   string
	Match string
}

//GetErrorRegexes returns all the error structs
func GetErrorRegexes() []Error {
	var regexes = []Error{
		{
			"PHP error",
			[]string{
				`(?i)php warning`,
				`(?i)php error`,
				`(?i)include_path`,
				`(?i)undefined index`,
				`(?i)undefined variable`,
				`(?i)expect(s*) parameter [A-Za-z0-9-_]{1,30}`},
		},
		{
			"General error",
			[]string{
				`(?i)fatal error`,
				`(?i)critical error`,
				`(?i)severe error`,
				`(?i)high error`,
				`(?i)medium error`,
				`(?i)uncaught exception`},
		},
		{
			"Debug information",
			[]string{
				`(?i)Debug trace`,
				`(?i)stack trace\\:`},
		},
		{
			"MySQL error",
			[]string{
				`(?i)valid MySQL result`,
				`(?i)check the manual that (fits|corresponds to) your MySQL server version`,
				`(?i)MySQLSyntaxErrorException`,
				`(?i)MySqlException`,
				`(?i)MySql error`,
				`(?i)Unknown column `,
				`(?i)SQL syntax.*?MySQL`,
				`(?i)Warning.*?mysqli?`,
				`(?i)Unknown column '[^ ]+' in 'field list'`,
				`(?i)com\\.mysql\\.jdbc`,
				`(?i)Zend_Db_(Adapter|Statement)_Mysqli_Exception`,
				`(?i)Syntax error or access violation`},
		},
		{
			"MariaDB error",
			[]string{
				`(?i)check the manual that (fits|corresponds to) your MariaDB server version`,
				`(?i)MariaDB error`},
		},
		{
			"PostgreSQL error",
			[]string{
				`(?i)valid PostgreSQL result`,
				`(?i)PG::SyntaxError:`,
				`(?i)PSQLException`,
				`(?i)PostgreSQL query failed`,
				`(?i)ERROR: parser: parse error at or near`,
				`(?i)PostgreSQL error`,
				`(?i)PostgreSQL.*?ERROR`,
				`(?i)Warning.*?\\Wpg_`,
				`(?i)Npgsql\\.`,
				`(?i)org\\.postgresql\\.util\\.PSQLException`,
				`(?i)ERROR:\\s\\ssyntax error at or near`,
				`(?i)org\\.postgresql\\.jdbc`},
		},
		{
			"MSSQL error",
			[]string{
				`(?i)Microsoft SQL error`,
				`(?i)Microsoft SQL Native Client error`,
				`(?i)ODBC SQL Server Driver`,
				`(?i)Unclosed quotation mark after the character string`,
				`(?i)SQLServer JDBC Driver`,
				`(?i)Driver.*? SQL[\\-\\_\\ ]*Server`,
				`(?i)OLE DB.*? SQL Server`,
				`(?i)\bSQL Server[^<"]+Driver`,
				`(?i)Warning.*?\\W(mssql|sqlsrv)_`,
				`(?i)\bSQL Server[^<"]+[0-9a-fA-F]{8}`,
				`(?i)System\\.Data\\.SqlClient\\.SqlException`,
				`(?is)Exception.*?\bRoadhouse\\.Cms\\.`,
				`(?i)\\[SQL Server\\]`,
				`(?i)ODBC Driver \\d+ for SQL Server`,
				`(?i)com\\.jnetdirect\\.jsql`,
				`(?i)macromedia\\.jdbc\\.sqlserver`,
				`(?i)Zend_Db_(Adapter|Statement)_Sqlsrv_Exception`,
				`(?i)com\\.microsoft\\.sqlserver\\.jdbc`,
				`(?i)SQL(Srv|Server)Exception`},
		},
		{
			"OracleDB error",
			[]string{
				`(?i)(\\bORA-\\d{5}|Oracle error|Oracle.*Driver|Warning.*\\Woci_.*|Warning.*\\Wora_.*)`},
		},
		{
			"IBMDB2 error",
			[]string{
				`(?i)(CLI Driver.*DB2|DB2 SQL error|\\bdb2_\\w+\\(|SQLSTATE.+SQLCODE)`},
		},
		{
			"SQLite error",
			[]string{
				`(?i)(SQLite\\/JDBCDriver|SQLite.Exception|System.Data.SQLite.SQLiteException|Warning.*sqlite_.*|Warning.*SQLite3::|\\[SQLITE_ERROR\\])`},
		},
	}
	return regexes
}

//RemoveDuplicateErrors removes duplicates from Errors found
func RemoveDuplicateErrors(input []ErrorMatched) []ErrorMatched {
	keys := make(map[string]bool)
	list := []ErrorMatched{}
	for _, entry := range input {
		if _, value := keys[entry.Match+entry.Url]; !value {
			keys[entry.Url] = true
			list = append(list, entry)
		}
	}
	return list
}