From 75373551b26c723e91bf524d7f5eac364c317cf5 Mon Sep 17 00:00:00 2001 From: orri Date: Tue, 30 Apr 2024 09:50:19 +0000 Subject: [PATCH] Fix heap buffer overflow Fixes #800 --- cJSON.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/cJSON.c b/cJSON.c index 4f5b38dc..f1fd0b67 100644 --- a/cJSON.c +++ b/cJSON.c @@ -1660,6 +1660,11 @@ static cJSON_bool parse_object(cJSON * const item, parse_buffer * const input_bu current_item = new_item; } + if (input_buffer->offset+1 >= input_buffer->length) + { + goto fail; /* nothing comes after the comma */ + } + /* parse the name of the child */ input_buffer->offset++; buffer_skip_whitespace(input_buffer);