Fix null byte addition during variable lookup

usdAG · Jun 3, 2024 · 94036bd · 94036bd
1 parent 6b3267d
commit 94036bd
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/src/main/java/de/usd/cstchef/Utils.java b/src/main/java/de/usd/cstchef/Utils.java
@@ -217,8 +217,11 @@ public static HttpRequest addCookieToHttpRequest(HttpRequest request, Cookie coo
     }
 
     public static ByteArray insertAtOffset(ByteArray input, int start, int end, ByteArray newValue) {
-        ByteArray prefix = BurpUtils.subArray(input, 0, start);
-        ByteArray rest = BurpUtils.subArray(input, end, input.length());
+        ByteArray prefix = input.subArray(0, start);
+        ByteArray rest = input.subArray(0, 0);
+        if(end < input.length()) {
+            rest = input.subArray(end, input.length());
+        }
 
         ByteArray output = prefix.withAppended(newValue).withAppended(rest);
         return output;