From bba42efe684b66581aa335cf0ecd80c7b6a648ba Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jonas=20M=C3=B6ller?= Date: Mon, 13 Mar 2023 21:11:55 +0100 Subject: [PATCH] Add missing length check --- frozen.c | 1 + 1 file changed, 1 insertion(+) diff --git a/frozen.c b/frozen.c index 4a6af16..9a1f389 100644 --- a/frozen.c +++ b/frozen.c @@ -242,6 +242,7 @@ static int json_parse_string(struct frozen *f) { EXPECT(ch >= 32 && len > 0, JSON_STRING_INVALID); /* No control chars */ EXPECT(len <= json_left(f), JSON_STRING_INCOMPLETE); if (ch == '\\') { + EXPECT(f->cur + 1 < f->end, JSON_STRING_INVALID); EXPECT((n = json_get_escape_len(f->cur + 1, json_left(f))) > 0, n); len += n; } else if (ch == '"') {