[Bug 209492] devel/jansson: patch for CVE-2016-4425 (r414586) breaks jansson: now it fails to parse large flat json files

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Sat May 14 03:53:49 UTC 2016


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=209492

            Bug ID: 209492
           Summary: devel/jansson: patch for CVE-2016-4425 (r414586)
                    breaks jansson: now it fails to parse large flat json
                    files
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: vanilla at FreeBSD.org
          Reporter: yuri at rawbw.com
             Flags: maintainer-feedback?(vanilla at FreeBSD.org)
          Assignee: vanilla at FreeBSD.org

With CVE-2016-4425 patch json_loads now fails to parse such json:

{"x":{

"a":[
["aaaa1"],
["aaaa2"],
["aaaa3"],
...
few thousand items
...
]
}}

You limited "breadth", not "depth".

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-ports-bugs mailing list