Max Bruckner 954d61e5e7 Fix #189, ensure returns an invalid pointer ...

If realloc returns NULL, ensure didn't abort but returned
printbuffer.offset instead. If an attacker can control
printbuffer.offset and also make realloc fail at just the right moment,
this would make cJSON potentially write at an arbitrary memory address.

2017-07-12 23:02:31 +02:00

17 KiB

Raw Blame History

View Raw