mirror of
https://github.com/DaveGamble/cJSON.git
synced 2026-06-05 21:04:39 +00:00
fix the incorrect check in decode_array_index_from_pointer (#957)
this fixes CVE-2025-57052
This commit is contained in:
+1
-1
@@ -282,7 +282,7 @@ static cJSON_bool decode_array_index_from_pointer(const unsigned char * const po
|
||||
return 0;
|
||||
}
|
||||
|
||||
for (position = 0; (pointer[position] >= '0') && (pointer[0] <= '9'); position++)
|
||||
for (position = 0; (pointer[position] >= '0') && (pointer[position] <= '9'); position++)
|
||||
{
|
||||
parsed_index = (10 * parsed_index) + (size_t)(pointer[position] - '0');
|
||||
|
||||
|
||||
Reference in New Issue
Block a user