diff options
| author |  Nikias Bassen | 2026-01-21 12:24:52 +0100 |
|---|---|---|
| committer | Nikias Bassen | 2026-01-21 12:26:13 +0100 |
| commit | c0f9df912d2a4001e56321fb53615e6474b32232 (patch) | |
| tree | ce3d46fa9ac9e173d2f86451037d1456205c067f /fuzz/bplist-crashes/crash-daddb6e82e3d1ed76e20e4131462f5247a6fb131 | |
| parent | c18d6b323e8121c041e8b88d2ea6b6e85ca41274 (diff) | |
| download | libplist-c0f9df912d2a4001e56321fb53615e6474b32232.tar.gz libplist-c0f9df912d2a4001e56321fb53615e6474b32232.tar.bz2 | |
jsmn: use size_t for token offsets and harden against overflow
Use size_t for token start/end offsets instead of int, replace the -1
sentinel with SIZE_MAX, and add a defensive guard against offset
wraparound. This prevents overflow when parsing very large JSON inputs.
This addresses issue #282.
Credit to @ylwango613 for repporting.
Diffstat (limited to 'fuzz/bplist-crashes/crash-daddb6e82e3d1ed76e20e4131462f5247a6fb131')
0 files changed, 0 insertions, 0 deletions