library/cJSON
1
0
Fork 0
mirror of https://github.com/DaveGamble/cJSON.git synced 2025-09-15 12:58:50 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

fix the incorrect check in decode_array_index_from_pointer (#957)
Some checks failed
CI / linux (CLANG, ENABLE_SANITIZERS) (push) Has been cancelled
Details
CI / linux (CLANG, ENABLE_VALGRIND) (push) Has been cancelled
Details
CI / linux (CLANG, NONE_MEM_CHECK) (push) Has been cancelled
Details
CI / linux (GCC, ENABLE_SANITIZERS) (push) Has been cancelled
Details
CI / linux (GCC, ENABLE_VALGRIND) (push) Has been cancelled
Details
CI / linux (GCC, NONE_MEM_CHECK) (push) Has been cancelled
Details
CI / macos (CLANG, ENABLE_SANITIZERS) (push) Has been cancelled
Details
CI / macos (CLANG, ENABLE_VALGRIND) (push) Has been cancelled
Details
CI / macos (CLANG, NONE_MEM_CHECK) (push) Has been cancelled
Details
CI / macos (GCC, ENABLE_SANITIZERS) (push) Has been cancelled
Details
CI / macos (GCC, ENABLE_VALGRIND) (push) Has been cancelled
Details
CI / macos (GCC, NONE_MEM_CHECK) (push) Has been cancelled
Details

Browse Source 
this fixes CVE-2025-57052
This commit is contained in:
Lee 2025-09-05 14:53:20 +08:00 committed by GitHub
parent 8f2beb57dd
commit 74e1ff4994
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
cJSON_Utils.c
View File

@ -282,7 +282,7 @@ static cJSON_bool decode_array_index_from_pointer(const unsigned char * const po
return 0;
}
for (position = 0; (pointer[position] >= '0') && (pointer[0] <= '9'); position++)
for (position = 0; (pointer[position] >= '0') && (pointer[position] <= '9'); position++)
{
parsed_index = (10 * parsed_index) + (size_t)(pointer[position] - '0');