Fixes #6151

data/xml/queries.xml

@@ -1939,7 +1939,7 @@
         </dbs>
         <tables>
             <inband query="SELECT CASE table_schema WHEN '' THEN 'default' ELSE table_schema END,table_name FROM INFORMATION_SCHEMA.TABLES" condition="table_schema"/>
-            <blind query="SELECT table_name FROM INFORMATION_SCHEMA.TABLES WHERE table_schema=CASE '%s' WHEN 'default' THEN '' ELSE '%s' END ORDER BY table_name" count="SELECT COUNT(table_name) FROM INFORMATION_SCHEMA.TABLES WHERE table_schema=CASE '%s' WHEN 'default' THEN '' ELSE '%s' END"/>
+            <blind query="SELECT table_name FROM INFORMATION_SCHEMA.TABLES WHERE table_schema=CASE '%s' WHEN 'default' THEN '' ELSE '%s' END ORDER BY table_name LIMIT 1 OFFSET %d" count="SELECT COUNT(table_name) FROM INFORMATION_SCHEMA.TABLES WHERE table_schema=CASE '%s' WHEN 'default' THEN '' ELSE '%s' END"/>
         </tables>
         <columns>
             <inband query="SELECT column_name,spanner_type FROM INFORMATION_SCHEMA.COLUMNS WHERE table_name='%s' AND table_schema=CASE '%s' WHEN 'default' THEN '' ELSE '%s' END" condition="column_name"/>

lib/core/settings.py

@@ -20,7 +20,7 @@ from lib.core.enums import OS
 from thirdparty import six
 
 # sqlmap version (<major>.<minor>.<month>.<monthly commit>)
-VERSION = "1.10.10.14"
+VERSION = "1.10.10.15"
 TYPE = "dev" if VERSION.count('.') > 2 and VERSION.split('.')[-1] != '0' else "stable"
 TYPE_COLORS = {"dev": 33, "stable": 90, "pip": 34}
 VERSION_STRING = "sqlmap/%s#%s" % ('.'.join(VERSION.split('.')[:-1]) if VERSION.count('.') > 2 and VERSION.split('.')[-1] == '0' else VERSION, TYPE)

tests/test_databases_enum.py

@@ -286,6 +286,28 @@ class TestGetTables(_BaseEnumTest):
         self.assertIn("testdb", result)
         self.assertEqual(sorted(result["testdb"]), sorted(tables))
 
+    def test_get_tables_inference_spanner(self):
+        # Spanner's blind template must page per row (it used to crash with "not all arguments converted", #6151)
+        set_dbms("Spanner")
+        self._enable_inference()
+        d = self._fresh()
+        conf.db = "testdb"
+        conf.tbl = None
+
+        tables = ["t_a", "t_b"]
+        queries_ = []
+
+        def gv(query, *a, **k):
+            if k.get("expected") == EXPECTED.INT:
+                return str(len(tables))
+            queries_.append(query)
+            return [tables[len(queries_) - 1]]
+
+        dbmod.inject.getValue = gv
+        result = d.getTables()
+        self.assertEqual(sorted(result["testdb"]), sorted(tables))
+        self.assertEqual([_.endswith("OFFSET %d" % i) for i, _ in enumerate(queries_)], [True, True])
+
 
 class TestGetColumns(_BaseEnumTest):
     def _run_direct(self, dbms, db, tbl, rows):