9 Commits

Author SHA1 Message Date
Zhao Mengmeng
1243399bf7 Set free'd pointers to NULL whenever they are not reassigned
Backport from upstream:
542fb0eadd

A double free vulnerability was discovered in cJSON_Delete function through
fuzzing. Fix it by set pointers to NULL immediately after they are deallocated.

Links: https://github.com/DaveGamble/cJSON/issues/833

Signed-off-by: Zhao Mengmeng <zhaomengmeng@kylinos.cn>
2024-05-29 14:45:05 +08:00
xiejing
7358065591 Fix heap buffer overflow 2024-05-22 16:41:48 +08:00
wuzhaomin
1a772b33a7 fix: print int without decimal places 2024-05-10 17:46:43 +08:00
wuzhaomin
b21492a993 add allocate check for replace_item_in_object 2024-05-09 15:08:51 +08:00
肖在
9a49952f8c Fix a null pointer crash in cJSON_ReplaceItemViaPointer 2024-05-07 14:29:36 +08:00
lvfei
325f386d63 CVE-2024-31755
(cherry picked from commit f61200d5241bd826f5fa1df6e81b3f4f482093f8)
2024-04-29 13:57:37 +08:00
xiejing
05c9d03fed fix potential memory leak in merge_patch() 2024-03-05 16:37:18 +08:00
liningjie
2214746100 Fix CVE-2023-50471 CVE-2023-50472
(cherry picked from commit fdb5600f2a2aca9219e26f95937ce4d54292f973)
2023-12-27 16:53:05 +08:00
jiangxinyu
93301743d9 init project 2021-09-23 10:05:23 +08:00