search

vivkin / gason

Lightweight and fast JSON parser for C++
MIT License
338 stars 51 forks source link

Heap buffer overflow on backslash(es?) #27

Closed PerGraa closed 7 years ago

PerGraa commented 7 years ago

Hi.

I have been playing around with afl fuzzing and the attached input file seems to provoke a heap buffer overflow in gason. I have not investigated in depth, but afl-analyze suggests that handling of backslash in input is to blame.

gason.crash.00.min.json.txt

afl-analyze

PerGraa commented 7 years ago

A case of forgotten zero termination. sigh Move along, nothing to see :)