Browse Source

Merge pull request #325 from rouault/fix_stack_overflow_in_json_object_double_to_json_string_format

Fix stack buffer overflow in json_object_double_to_json_string_format()
tags/json-c-0.13-20171207
Eric Haszlakiewicz GitHub 8 years ago
parent
commit
e76ea37772
1 changed files with 2 additions and 0 deletions
  1. +2
    -0
      json_object.c

+ 2
- 0
json_object.c View File

@@ -717,6 +717,8 @@ static int json_object_double_to_json_string_format(struct json_object* jso,
format ? format : format ? format :
(modf(jso->o.c_double, &dummy) == 0) ? "%.17g.0" : "%.17g", (modf(jso->o.c_double, &dummy) == 0) ? "%.17g.0" : "%.17g",
jso->o.c_double); jso->o.c_double);
if(size < 0 || size >= (int)sizeof(buf))
size = (int)sizeof(buf);


p = strchr(buf, ','); p = strchr(buf, ',');
if (p) { if (p) {


Loading…
Cancel
Save