mirror of
https://github.com/DaveGamble/cJSON.git
synced 2026-09-28 16:57:23 +00:00
fix the incorrect check in decode_array_index_from_pointer (#957)
this fixes CVE-2025-57052
This commit is contained in:
+1
-1
@@ -282,7 +282,7 @@ static cJSON_bool decode_array_index_from_pointer(const unsigned char * const po
|
|||||||
return 0;
|
return 0;
|
||||||
}
|
}
|
||||||
|
|
||||||
for (position = 0; (pointer[position] >= '0') && (pointer[0] <= '9'); position++)
|
for (position = 0; (pointer[position] >= '0') && (pointer[position] <= '9'); position++)
|
||||||
{
|
{
|
||||||
parsed_index = (10 * parsed_index) + (size_t)(pointer[position] - '0');
|
parsed_index = (10 * parsed_index) + (size_t)(pointer[position] - '0');
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user