Update #125, changelog

client9 · May 21, 2017 · bca16fe · bca16fe
1 parent 9b14451
commit bca16fe
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 3 deletions.
diff --git a/CHANGELOG b/CHANGELOG
@@ -1,11 +1,13 @@
-# vNEXT
+# NEXT
 
 * client9/libinjection#123 - oracle false negative
 * client9/libinjection#117 #116 - overread in XSS
 * client9/libinjection#112 - fix shared library on macOS
 * client9/libinjection#122 #115 - false positive issue for XSS
 * client9/libinjection#113 - save space in struct
 * #126 - add usage to sqli cli tool
+* client9/libinjection#113 
+* #125 many false positives
 
 # v3.9.2 - 2016-05-21
 

diff --git a/data/sqli-github-125.txt b/data/sqli-github-125.txt
@@ -1,8 +1,11 @@
 # https://github.com/client9/libinjection/issues/125 HT @d0znpp
 
 "-sqlite_version() UNION SELECT password FROM users- --
-)-sleep(9999
 1337) INTO OUTFILE ‘xxx’--
 123);DROP TABLE users--
 ) OR (SELECT password FROM users ...
-*/UNION SELECT password FROM users--
+
+# the following don't fit into the libinjection model and are
+# best handled in another layer, at least for now.
+#)-sleep(9999
+#*/UNION SELECT password FROM users--