1
0
mirror of https://github.com/ultrajson/ultrajson.git synced 2024-12-04 06:38:23 +01:00
ultrajson/lib
Brénainn Woodsend 61dd6f19e8 Fix unchecked buffer overflows (CVE-2021-45958).
Add a few extra memory reserve calls to account for the extra space that
indentation needs.

These kinds of memory issues are hard to spot because the buffer is resized in
powers of 2 meaning that a miscalculation would only show any symptoms if the
required buffer size is estimated to be just below a 2 power but is actually
just above. Add a debug mode which replaces the 2 power scheme with reserving
only the memory explicitly requested and adds some overflow checks.
2022-04-05 21:04:39 +01:00
..
dconv_wrapper.cc dconv no longer uses global instances of StringToDoubleConverter/DoubleToStringConverter 2021-08-03 10:17:10 -04:00
Makefile Lint end-of-file-fixer 2020-05-12 09:36:47 +03:00
ultrajson.h Fix nan bug in pandas port 2022-04-04 13:56:19 -04:00
ultrajsondec.c Fix nan bug in pandas port 2022-04-04 13:56:19 -04:00
ultrajsonenc.c Fix unchecked buffer overflows (CVE-2021-45958). 2022-04-05 21:04:39 +01:00