Browse Source
jsmn would accept invalid JSON objects. This is bad because it would set ->size incorrectly: we expect to have at least size * 2 tokens (in pairs). We want to rely on ->size, but this would create an exploitable buffer overflow! Fortunately, this is fixed upstream, so we add a test and upgrade to v1.0.0. Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>pylightning-async
Rusty Russell
6 years ago
committed by
Christian Decker
2 changed files with 6 additions and 1 deletions
@ -1 +1 @@ |
|||||
Subproject commit 6784c826d9674915a4d89649c6288e6aecb4110d |
Subproject commit 18e9fe42cbfe21d65076f5c77ae2be379ad1270f |
Loading…
Reference in new issue