Description

json: Limit recursion depth

* src/cJSON.c (MAX_DEPTH): New. Maximum recursion depth.
(parse_value, parse_array, parse_object): Carry and check
depth argument.
(cJSON_ParseWithOpts): Initialize depth.

This fixes a stack overflow if we get weird recursive
json data.

GnuPG-Bug-Id: T4331

Details

Provenance

aheinecke

Authored on Feb 27 2019, 2:27 PM

Parents

rM73b2f40ae5e6: cpp: Add ostream operators for import result

Branches

Unknown

Tags

Unknown

Tasks

T4331: Stack Buffer overflow in ``` parse_array (cJSON * item, const char *value, const char **ep)``` if we send a prepared JSON file

Event Timeline

aheinecke added a task: T4331: Stack Buffer overflow in ``` parse_array (cJSON * item, const char *value, const char **ep)``` if we send a prepared JSON file.Feb 27 2019, 3:03 PM

aheinecke committed rM4a117859e7a5: json: Limit recursion depth (authored by aheinecke).Feb 27 2019, 2:27 PM

json: Limit recursion depth
4a117859e7a5
Actions

Description

Details

Event Timeline

Changes (1)

rM4a117859e7a5

src/cJSON.c

json: Limit recursion depth4a117859e7a5Actions

Description

Details

Event Timeline

Changes (1)

rM4a117859e7a5

src/cJSON.c

json: Limit recursion depth
4a117859e7a5
Actions