9 Commits

Author SHA1 Message Date
Zhao Mengmeng
d76505099f Set free'd pointers to NULL whenever they are not reassigned
Backport from upstream:
542fb0eadd

A double free vulnerability was discovered in cJSON_Delete function through
fuzzing. Fix it by set pointers to NULL immediately after they are deallocated.

Links: https://github.com/DaveGamble/cJSON/issues/833

Signed-off-by: Zhao Mengmeng <zhaomengmeng@kylinos.cn>
(cherry picked from commit 1243399bf7d1638e0f8a4943c4c553fba4964bfd)
2024-06-07 11:46:25 +08:00
xiejing
b6f0de3dce Fix heap buffer overflow
(cherry picked from commit 7358065591b89369d2b574012101b797d779a27e)
2024-05-23 10:10:11 +08:00
wuzhaomin
8c13d42242 fix: print int without decimal places
(cherry picked from commit 1a772b33a707631150167749bae08b89233beede)
2024-05-11 10:11:37 +08:00
wuzhaomin
f360945ebf add allocate check for replace_item_in_object
(cherry picked from commit b21492a993d6dbeeaa6f920a122f1d2fdaad9962)
2024-05-10 15:28:58 +08:00
肖在
9fe79b4057 Fix a null pointer crash in cJSON_ReplaceItemViaPointer
(cherry picked from commit 9a49952f8cbdea51a568a4bf3a27ad21658e625c)
2024-05-07 17:19:48 +08:00
lvfei
9be92b8f80 CVE-2024-31755
(cherry picked from commit f61200d5241bd826f5fa1df6e81b3f4f482093f8)
2024-04-29 13:58:02 +08:00
xiejing
05c9d03fed fix potential memory leak in merge_patch() 2024-03-05 16:37:18 +08:00
liningjie
2214746100 Fix CVE-2023-50471 CVE-2023-50472
(cherry picked from commit fdb5600f2a2aca9219e26f95937ce4d54292f973)
2023-12-27 16:53:05 +08:00
jiangxinyu
93301743d9 init project 2021-09-23 10:05:23 +08:00