fix: check string length before checking unicode sequence

janfh · web-flow · commit 79596bc55915 · 2024-12-04T09:19:13.000+01:00
diff --git a/src/serializer.c b/src/serializer.c
@@ -51,7 +51,8 @@ static void   jx_EncodeJsonStream (PSTREAM p , PUCHAR in)
 			}
 		}
 		else if  (c  == pJw->backSlash) {
-			if (in[1] != 'u'   // Dont double escape unicode escape sequence
+			// Dont double escape unicode escape sequence
+			if (strlen(in) < 6 || in[1] != 'u'   
 				|| !isxdigit(in[2]) || !isxdigit(in[3])
 				|| !isxdigit(in[4]) || !isxdigit(in[5])) {  
 				stream_putc(p,pJw->backSlash);

Original file line number	Diff line number	Diff line change
`@@ -51,7 +51,8 @@ static void jx_EncodeJsonStream (PSTREAM p , PUCHAR in)`
`51`	`51`	`}`
`52`	`52`	`}`
`53`	`53`	`else if (c == pJw->backSlash) {`
`54`		`- if (in[1] != 'u' // Dont double escape unicode escape sequence`
	`54`	`+ // Dont double escape unicode escape sequence`
	`55`	`+ if (strlen(in) < 6 \|\| in[1] != 'u'`
`55`	`56`	`\|\| !isxdigit(in[2]) \|\| !isxdigit(in[3])`
`56`	`57`	`\|\| !isxdigit(in[4]) \|\| !isxdigit(in[5])) {`
`57`	`58`	`stream_putc(p,pJw->backSlash);`