Skip to content

Handle edge case causing out-of-bound reads#464

Open
MichaelChirico wants to merge 1 commit into
jeroen:masterfrom
MichaelChirico:yajl-vuln
Open

Handle edge case causing out-of-bound reads#464
MichaelChirico wants to merge 1 commit into
jeroen:masterfrom
MichaelChirico:yajl-vuln

Conversation

@MichaelChirico

Copy link
Copy Markdown
Contributor

This patch fixes all three of the following upstream bugs:

That repo is essentially unmaintained, so I didn't file these patches there.

Bug fixed by Gemini, as were the test cases with some amount of touch-up by me for style (but which are basically copied from the bug reports). I also had Gemini confirm the error is present in {jsonlite} absent the patch with valgrind.

Applied internally, this patch passes all downstreams of yajl, including a subset of jsonlite downstreams and some other C/C++ codebases.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant