Fix for CVE-2017-16516

Potential buffer overread: A JSON file can cause denial of service. Origin: brianmario/yajl-ruby@a8ca8f4 Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1040036 Bug: lloyd#248
likema · Dec 2, 2023 · d070426 · d070426
1 parent af60fb1
commit d070426
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/yajl_encode.c b/src/yajl_encode.c
@@ -206,8 +206,8 @@ void yajl_string_decode(yajl_buf buf, const unsigned char * str,
                     end+=3;
                     /* check if this is a surrogate */
                     if ((codepoint & 0xFC00) == 0xD800) {
-                        end++;
-                        if (str[end] == '\\' && str[end + 1] == 'u') {
+                        if (end + 2 < len && str[end + 1] == '\\' && str[end + 2] == 'u') {
+                            end++;
                             unsigned int surrogate = 0;
                             hexToDigit(&surrogate, str + end + 2);
                             codepoint =